Data breach litigation shows signs of evolving