In a precedential opinion that could clear the way for similar cyberbreach claims, the U.S. Court of Appeals for the Third Circuit has ruled that the risk of identity theft or fraud is a concrete injury that may form the basis of a claim.