You can make a data breach claim simply on the basis that a business failed to adequately protect your data, regardless of whether a breach occurred due to negligence or hacking, for example.
While you do not need to have suffered any financial loss, emotional distress, or other inconvenience, such outcomes may lead to you being awarded a more significant compensation amount.