Your Data Was Stolen, But Not Your Identity (Yet)

Cyberattack victims can sue data custodians despite not suffering actual identity theft. In determining the plaintiff’s standing, a growing majority of circuit courts now turn to the nature of stolen data to determine whether the victims experience a “substantial risk” of identity theft.

The U.S. Court of Appeals for the Federal Circuit joined the majority approach – followed by the Sixth, Seventh, and Ninth Circuits – holding that victims alleging personal data theft, including medical identification numbers, have standing to pursue their claims.

A minority of circuits, on the other hand, require data breach compromises… read entire article

By Kristen L. Burge of McCranie Sistrunk Anzelmo Hardy McDaniel & Welch