A recent seventh circuit case finds that the risk of eventual damage from a data breach is injury enough to give standing to bring a class action.