For years, data-breach plaintiffs have faced a huge barrier to obtaining relief in court: many courts have dismissed their complaints because they have been unable to demonstrate actual harm (or “concrete and particularized injury,” in lawyer-speak)—and actual harm is generally a requirement to have standing in federal court. Many of these plaintiffs were able to… Continue Reading