Va. Code Ann. § 8.01-40.1

Any person whose property or person is injured by reason of a violation of the provisions of the Virginia Computer Crimes Act (§ 18.2-152.1 et seq.) may sue and recover damages as provided in § 18.2-152.12. An action shall be commenced before the earlier of (i) five years after the last act in the course of conduct constituting a violation of the Computer Crimes Act or (ii) two years after the plaintiff discovers or reasonably should have discovered the last act in the course of conduct constituting a violation of the Computer Crimes Act.