A federal appeals court has found that a plaintiff had standing to sue over a 2013 data breach but couldn’t bring claims based on “bare assertions.”

Monday’s decision by the U.S. Court of Appeals for the Eighth Circuit reversed a Missouri federal judge’s finding for St. Louis-based investment firm Scottrade Inc. based on federal jurisdiction.