The Federal Trade Commission has surmounted the first hurdle in a case that tests its authority to sue companies over data breaches that compromise consumers’ personal information.

The FTC has brought administrative actions over such lapses but its suit against Wyndham Hotels and Resorts, which survived a motion to dismiss on Monday, is the first to be filed in a court.