The class-action litigation over the Ashley Madison data breach is testing how much privacy courts are willing to grant plaintiffs who sue companies for failing to protect their personal information.

In August hackers released nearly 10 gigabytes of data stolen from Avid Life Inc., the parent company of Ashley Madison, a dating website for those looking for extramarital affairs. The data included sensitive information, including customers’ names, email addresses and credit-card details, and exposed millions of accounts.

...