In Collins v. Athens Orthopedic Clinic, Case No. A18A0296 (decided June 27, 2018), the Georgia Court of Appeals addressed the issue of whether an individual whose personally-identifiable information (“PII”) was stolen from a business in a computer hack had standing to pursue damages claims against the business that was hacked. The plaintiffs in the Collins case were current and former patients of the defendant clinic. A hacker had gained access to the clinic’s computers and stolen patient PII maintained in a clinic database. The hacker requested ransom from the clinic, which the clinic did not pay. The hacker allegedly offered… Read more