Modern data breaches can have huge impact, often striking millions of victims. But for most, the breaches haven't cost them anything: No fraudulent charges or costs associated with changing their bank cards.

That's left courts to grapple with whether such victims have standing to sue for injuries and, if so, how they should be compensated.

Weighing in on that debate, a federal judge overseeing a class action against Target Corp. on Wednesday came out with an order approving class certification in a $10 million data-breach settlement.