* This article originally appeared in Law360 on September 27, 2018.
The Third Circuit recently overturned a district court’s ruling on In re Horizon Healthcare Services Inc. Data Breach Litigation and gave new life to a putative class action over a data breach. No. 15-2309 (Jan. 20, 2017). The Third Circuit panel held that allegations of unauthorized disclosure of personal information in violation of the Fair Credit Reporting Act (“FCRA”) constituted a de facto injury sufficient to establish Article III standing. Plaintiffs did not allege identity theft, any other misuse of the compromised data, or even any mitigation costs.