The United States Court of Appeals for the Eighth Circuit, in. Carlsen v. GameStop, Inc., affirmed the dismissal of a case against GameStop, a gaming retail chain, related to its alleged disclosure of personal information to a third party in violation of its privacy policy. However, in the course of its decision, the court adopted a broad view on standing that cuts against the grain of recent decisions denying standing in data breach cases based on the lack of a concrete injury. The decision thus may breathe some life into data breach lawsuits where plaintiffs cannot actually allege a specific concrete injury ‒ or at least attract plaintiffs to file such suits within the bounds of the Eighth Circuit.