The U.S. Court of Appeals for the Seventh Circuit held that data breach victims suffer injury for purposes of Article III standing and can thus have their day in court against companies who fail to protect their personal information from hackers.