The district court expressly rejected the expert testimony because "the affidavit of plaintiffs' expert conclusorily posits that plaintiff's risk of identity fraud is significantly increased without quantifying the risk."The judge has a point. Most statements about risk are meaningless because the risk is not quantified.