Damages Theories in Data Breach Litigation