Plaintiffs attorneys might be taking their consumer privacy and data breach class actions to state courts after the U.S. Supreme Court set a higher standard for injuries needed for standing in federal courts.

On June 25, the court’s 5-4 majority in the TransUnion v. Ramirez case found that plaintiffs whose Fair Credit Reporting Act protections were violated didn’t show “concrete” injuries from those violations and so lacked standing to sue for damages in federal court.