Takeaway: For Article III standing purposes, an injury-in-fact must be “concrete.” Tangible harms, such as physical injury and monetary loss, are obviously concrete injuries. But data breach ...