First Circuit Affirms Dismissal of Data Breach Class Action for Lack of Traceable Injury

The First Circuit affirmed dismissal of a putative data-breach class action against Bayamón Medical Center, holding the plaintiff did not plausibly show her identity-related injuries were traceable to the healthcare provider’s 2019 ransomware attack; the decision underscores the importance of causation and traceability for Article III standing at the pleading stage.