A district court judge in Virginia looked to two recent federal appellate decisions when concluding a U.S. Army veteran did not have standing to sue his insurance provider for a ransomware attack because there was no evidence to show that his personal identifying information had been stolen or used.