Hungry litigators on the prowl for the Next Big Thing have been talking for ages about data breach litigation. With the agreement on Friday by Anthem to pay a record $115 million to settle a cybersecurity class action lawsuit, these cases are now officially in the big-ticket realm.

Still, there's the niggling question of cognizable injury. How exactly are consumers hurt if their private information is compromised?

Last year, U.S. District Judge Lucy Koh of the Northern District of California rejected Anthem's defense that while exposing a customer's personal information is unfortunate, it doesn't necessarily amount to an actual injury.