The Robbins court does not give any explanation of what counts as a tangible harm, but courts recognize a monetary loss as tangible.
In 2013, hackers stole credit card information about customers from the luxury department store Neiman Marcus. In Remijas v. Neiman Marcus, the plaintiffs claimed that they had "a concrete injury in the loss of their private information."
Is the loss of privacy a tangible loss like the loss of an amount of money?