Corporate Liability in Data Breaches: New Legal Precedents