Data Breaches and the Phantom Damage Allegation