An Article discussing shareholder derivative and securities fraud class actions brought after data breaches and the obstacles plaintiffs face establishing their claims in court. It discusses Securities and Exchange Commission (SEC) guidance and enforcement activities related to cybersecurity. This Note also provides guidance for the issues to consider in bringing these cases and how organizations can best defend against them.