Wisconsin court limits employee data breach suits despite notice

On 3 April 2026, DataBreaches[.]Net reported that Wisconsin employees may find it harder to sue their employers over data breaches, due to standing rules that require victims to suffer identity theft or concrete, imminent harm rather than mere risk of future misuse. The piece highlights a recent Wisconsin Court of Appeals decision in Bauer v. Fincantieri Marine Group, LLC, which it notes is unpublished but signals limits to employer liability when breach-related data may be viewed or collected.

It describes a ransomware incident in the case in which the employer provided notice to affected individuals and offered free credit monitoring after determining that current and former employees’ data may have been exposed. Aaron Graf of Amundsen Davis LLC is quoted stating the standing standard under Wisconsin law. The article suggests the decision, and its unpublished status, could influence how employers approach liability in similar breaches, with readers directed to JDSupra for more detail.