CareFirst Members Win Class Status in Suit Over 2014 Data Breach

More than one million consumers whose personal information was disclosed in a 2014 data breach suffered by CareFirst Inc. can bring their contract claims against the health insurer as a class, despite their potential recovery being limited to nominal damages, a federal court ruled.

CareFirst’s alleged breach of contract with patients constituted a concrete injury sufficient for standing for all proposed class members, Judge Christopher R. Cooper of the US District Court for the District of Columbia said March 29.

That holding allowed Cooper to resolve in the plaintiffs’ favor his concern that individualized inquiries would be required to determine ...