A recent decision from the Supreme Court of New York confirms that to survive dismissal, plaintiffs in data breach actions must establish injury-in-fact through a showing of actual or imminent harm.  In evaluating whether an alleged harm arising from a data breach is actual or imminent, New York courts apply a five-factor balancing test.  Under