FTC data breach case dismissal raises bar for demonstrating consumer harm