Classified Class Action Blog

  • All Topics
  • Contributors
  • About
  • Contact
  • Subscribe

Circuit Split on Standing in Data Breach Class Actions Survives Clapper

September 22, 2015 by Carlton Fields

On September 17, the Seventh Circuit Court of Appeals denied a retailer’s petition for rehearing en banc of a three-judge panel opinion holding that plaintiffs whose credit card information was stolen in a data breach had standing to sue under Article III of the United States Constitution based on alleged fear of future identity theft. As we previously reported, the litigation arose from a cyberattack on luxury retailer Neiman Marcus over the 2013 holiday shopping season in which hackers may have gained access to 350,000 credit and debit cards; plaintiffs, all of whom made credit or debit card purchases from the retailer during the relevant time period, filed a putative class action lawsuit on behalf of themselves and all other customers whose card information may have been compromised. Neiman Marcus moved to dismiss for lack of standing; the district court granted that motion.

In finding that the plaintiffs’ alleged future injuries satisfied Article III, the Seventh Circuit panel opinion first considered the injury in fact requirement—starting with the acknowledgment that the Supreme Court’s 2013 holding in Clapper v. Amnesty International USA, 133 S. Ct. 1138 (2013), requires that any alleged “future harm” be “certainly impending” and that “allegations of possible future injury are not sufficient.” Taking issue with the lower court and other district courts that dismissed putative data breach class actions for lack of standing under Clapper, the Seventh Circuit panel found that “Clapper does not . . . foreclose any use whatsoever of future injuries to support Article III standing.” In so holding, the court specifically distinguished the facts of the data breach class action from those in Clapper, finding that the plaintiffs here had shown a substantial risk of harm from the data breach because there was no dispute that various customers’ card information had been stolen and because “the purpose of [a] hack is, sooner or later, to make fraudulent charges or assume those customers’ identities.” Indeed, 9,200 of the cards had already incurred fraudulent charges; further, the panel noted that the retailer’s offer of free credit monitoring services tacitly acknowledged the likelihood of future unauthorized charges.

The Seventh Circuit opinion is troubling for businesses, which are also the victims in cyberattacks and had hoped, in the wake of Clapper, to receive some judicial relief from putative data breach class actions where the plaintiffs were admittedly offered free credit monitoring and were reimbursed for fraudulent charges (if any) allegedly incurred as a result of the breach.  Indeed, the opinion’s lenient view of Article III’s standing requirement, coupled with a recent circuit opinion rejecting a “heightened” ascertainability requirement, may mark the Seventh Circuit as an emerging venue of choice for the plaintiffs’ class action bar. However, there may yet be a silver lining for corporate defendants, as the panel remanded the case to the lower court to consider the retailer’s pending motion to dismiss for failure to state a claim. See, e.g., Moyer v. Michaels Stores, Inc., No. 14c561 (N.D. Ill. July 14, 2014) (finding Article III’s standing requirement was met in a putative data breach class action notwithstanding Clapper, but granting motion to dismiss because the plaintiffs failed to allege actual monetary damages—a required element of their claims—as neither an increased risk of identity theft nor the purchase of credit monitoring services constitute cognizable monetary damages).

In denying the retailer’s petition for rehearing en banc, the Seventh Circuit has confirmed that the circuit split on the issue of standing in data breach class actions survives Clapper. In 2012, the Supreme Court denied a petition for writ of certiorari to address the question of standing in data breach cases, Reilly v. Ceridian Corp., 664 F.3d 38 (3d Cir. 2011), cert. denied, 132 S. Ct. 2395 (2012). Will the Supreme Court be asked to revisit this issue soon?  Stay tuned to Classified for more updates!

Remijas v. Neiman Marcus Group, LLC, No. 14-3122 (7th Cir. July 20, 2015), reh’g denied, (Sept. 17, 2015).

Portions of this post previously appeared in an article by the author in the ABA Section of Litigation’s Class Actions & Derivative Suits Newsletter.

Print Friendly, PDF & Email

« Previous Article

Eleventh Circuit Denies Petition For Rehearing In Lisk v. Lumber One

Next Article »

Still a Target: Court Certifies Bank Class Claims Against Retailer Following Data Breach
Avatar

About Carlton Fields

Related Articles

  1. 2016 Carlton Fields Class Action Survey Reveals Important Trends in Class Action Management
  2. Are DC Federal Courts the Next Hotbed for Data Breach Class Actions?
  3. Still Standing: Ninth Circuit Again Finds Standing in Spokeo Remand

Get Weekly Updates!

2019 Class Action Survey – Now Available!

DOWNLOAD NOW
Carlton Fields Logo A blog focused on the latest class action developments and trends by the attorneys of Carlton Fields.

Search

Topics

Industries/Practices
  • Construction
  • Consumer Finance & Banking
  • Food & Beverage
  • Health Care
  • Insurance
  • Labor, Employment & ERISA
  • Manufacturing & Products
  • Pharmaceutical
  • Privacy & Technology
  • Securities
  • Telecommunications

Substantive/Procedural
  • Arbitration
  • CAFA
  • Certification
    • Adequacy
    • Ascertainability
    • Commonality
    • Numerosity
    • Predominance
    • Superiority
    • Typicality
  • Decertification
  • Settlements
  • Standing
  • Striking of Class Allegations

Courts/Jurisdiction
  • Federal District Courts
  • Federal Circuit Courts of Appeal
  • United States Supreme Court
  • State Courts

Monthly Archives

Recent Articles

  • Class Action Survey: What Percentage of Class Action Lawsuits Are Settled? When do Most Settlements Occur?
  • Class Action Survey: True or False? The Amount of Time In-House Attorneys Spent Managing Class Actions Has Increased.
  • No Speaking? No Standing!

Get Weekly Updates!

Carlton Fields

  • carltonfields.com
  • Practices
  • Industries
  • Class Action Survey

Related Industries/Practices

  • National Class Actions
  • National Trial Practice
  • Appellate & Trial Support
  • Our Class Action Experience

Classified: The Class Action Blog

  • All Topics
  • Contributors
  • About
  • Contact

Classified Logo
© 2014–2019 Carlton Fields, P.A. · Carlton Fields practices law in California as Carlton Fields, LLP · All Rights Reserved · Privacy Policy · Disclaimer

Carlton Fields publications should not be construed as legal advice on any specific facts or circumstances. The contents are intended for general information and educational purposes only, and should not be relied on as if it were advice about a particular fact situation. The distribution of this publication is not intended to create, and receipt of it does not constitute, an attorney-client relationship with Carlton Fields. This publication may not be quoted or referred to in any other publication or proceeding without the prior written consent of the firm, to be given or withheld at our discretion. To request reprint permission for any of our publications, please contact us. The views set forth herein are the personal views of the author and do not necessarily reflect those of the firm. This site may contain hypertext links to information created and maintained by other entities. Carlton Fields does not control or guarantee the accuracy or completeness of this outside information, nor is the inclusion of a link to be intended as an endorsement of those outside sites. This site may be considered attorney advertising in some jurisdictions.