Modern data breaches can have huge impact, often striking millions of victims. But for most, the breaches haven’t cost them anything: No fraudulent charges or costs associated with changing their bank cards.

That’s left courts to grapple with whether such victims have standing to sue for injuries and, if so, how they should be compensated.