Elephant Insurance Co. defeated a proposed class action over a data breach of its servers which compromised the personally identifiable information of more than 2.7 million consumers.

Three of the four named plaintiffs failed to allege an injury-in-fact sufficient to confer standing to sue in federal court, Judge John A. Gibney Jr. of the US District Court for the Eastern District of Virginia said Monday.

The fourth plaintiff alleged a cognizable injury but couldn’t trace that injury to Elephant, the judge said in granting the insurance company’s motion to dismiss.

Christopher Holmes, Trinity Bias, Jaime Cardenas, and Robert Shaw alleged …