data breach class action dismissed