Tuesday’s ruling, by U.S. District Judge Paul Grimm in Maryland, is one of the few by a federal judge granting class certification in a consumer data breach case.