Legal Question in Criminal Law in California

*You* are not entitled to anything. Your son is probably entitled to compensatory damages, but only from the hacker and those who knowingly used his information. My sense is that you hope to recover from the manufacturer and/or the service, but that is unlikely unless the product or service was defective. That someone was able to hack your son's account does not imply that the manufacturer or the service did anything wrong.

Whether your son can recover punitive damages will depend upon whether the hacker et al. can be found and brought to trial. (There is a very good chance they are in other countries, making it impractical to sue them in the U.S. unless the amount they stole was quite large.) It will also depend upon their wealth.

You can ask for anything you want. What you win depends upon what claims and causes of action you can actual prove in court with admissible and credible evidence. I wish you well, but such cases are technically difficult to prove, and you have to ask yourself what likelihood there is of locating and serving the defendant, let alone being able to ever collect anything on a judgment. Doing it yourself obviously avoids substantial legal fees that would be generated, but you'll have to research and learn all the things you must do when in pro per.