A Practice Note discussing common fact patterns that result in data breach class action cases, the federal and state statutory and common law claims plaintiffs often rely on to bring data breach claims, and the ongoing difficulties plaintiffs face establishing their claims in court such as establishing an injury-fact-sufficient to support Article III standing. This Note also discusses alternative theories of harm plaintiffs use to bring data breach class actions, class certification and settlement considerations, and issues on the horizon for data breach class actions.