Last week, the U.S. Supreme Court defined what “concrete” injury is needed for data privacy and breach lawsuits. While likely a win for businesses, the ruling could open the floodgates for more legal battles in state courts.