Do I have a case if the attacker was never caught?

Yes. Your claim targets the property owner or manager who failed to provide reasonable security, not the attacker. We use surveillance requests, witness testimony, and incident histories to prove negligence even when law enforcement has not identified a suspect.