Hackers attacked the luxury department store Neiman Marcus. The hackers obtained informatoin about 350,000 credit cards. Customers sued on various invasion of privacy theories.
As a result of the hack, the customers faced an increase risk of credit card fraud and identity theft. Does that increased risk qualify as an imminent harm?