Circuit Split on Data Breach Standing

 

Your Data Was Stolen, But Not Your Identity (Yet)
by Kristen L. Burge

Cyberattack victims can sue data custodians despite not suffering actual identity theft.  In determining the plaintiff’s standing, a growing majority of circuit courts now turn to the nature of stolen data to determine whether the victims experience a “substantial risk” of identity theft.

The U.S. Court of Appeals for the Federal Circuit joined the majority approach – followed by the Sixth, Seventh, and Ninth Circuits – holding that victims alleging personal data theft, including medical identification numbers, have standing to pursue their claims.

A minority of circuits, on the other hand, require data breach compromises…read entire article