Workers who had been subjected to a “phishing attack” in a targeted attempt to obtain data could bring a lawsuit to recover damages, U.S. District Judge Katherine Polk Failla ruled, applying a recently established multipronged test.