Facebook must face data breach class action on security, but not damages: US judge

But can seek better security at the social media company after a series of privacy lapses.