A federal appellate court has revived claims against online shoe retailer Zappos.com Inc. related to a 2012 data breach where hackers stole the personal information of more than 24 million customers.

The U.S. Court of Appeals for the Ninth Circuit on Thursday found that the “imminent” risk of identity theft from the Zappos breach was enough to establish standing to sue for those customers who had not yet been the victim of fraud. The decision reversed a ruling from U.S. District Judge Robert Clive Jones of the District of Nevada who dismissed the claims from plaintiffs who hadn’t alleged any instances of identity theft at the time of the suit.