Data breach mitigation costs can constitute cognizable damages

The First Circuit has held in John Anderson, et al., v. Hannaford Brothers Co., that the reasonably foreseeable costs of mitigating potential losses from a data breach constitute cognizable harm under Maine law, and therefore can support a negligence or breach-of-implied-contract action against a company that suffered the breach.