Class Action

Class Action Defense Cases–Amburgy v. Express Scripts: Missouri Federal Court Dismisses Theft Of Personal Information Class Action Complaint For Lack Of Standing Because Plaintiff’s Information And Identity Not Stolen

By Michael J. Hassen

Class Action Seeking Monetary and Injunctive Relief Arising from Theft of Personal Information, Allegedly Creating “Increased Risk” of Identity Theft Requiring Monitoring of Credit, Dismissed for Lack of Standing because Putative Class Representative did not Allege his Information was Stolen or had been used or Disclosed so Plaintiff Failed to Establish Injury-in-Fact Missouri Federal Court Holds

Plaintiff filed a putative class action against Express Scripts for negligence, breach of contract, violations of various “data breach notification laws” and violations of Missouri’s Merchandising Practices Act, arising out of the theft of its customers’ personal identification information; the class action complaint alleged that “inadequate security measures in relation to its computerized database system allowed unauthorized persons to gain access to confidential information of Express Scripts members contained in the database, with such information including names, dates of birth, Social Security numbers, and prescription information.” Amburgy v. Express Scripts, Inc., ___ F.R.D. ___ (E.D.Mo. November 23, 2009) [Slip Opn., at 1, 3.] Plaintiff filed the class action in federal court, asserting jurisdiction under the Class Action Fairness Act of 2005 (CAFA), id., at 3. According to the allegations underlying the class action complaint, the criminals who stole the information advised Express Scripts “that they would make public the confidential information obtained through the breach if Express Scripts did not pay a certain amount of money to them.” Id., at 2. Express Scripts advised its customers of the security breach, id. The class action alleged that the theft placed class members “at an increased risk of becoming victims of identity theft crimes, fraud, abuse, and extortion,” and that class members would be required to spend “considerable time and money to protect themselves” from injury. Id. Defense attorneys moved to dismiss the class action complaint on the grounds that plaintiff lacked standing and that the class action failed to state a claim for relief. Id., at 3. The district court granted the motion.

The federal court noted, “Database breaches appear to provide the basis for a new breed of lawsuits, and especially class action lawsuits, in which plaintiffs allege, as here, that the database handlers’ negligence in developing and maintaining security measures have resulted in otherwise personal and confidential information being compromised, thereby increasing the risk of identity theft for those individuals whose information was so compromised. The remedies sought in these actions vary, but generally include costs for credit monitoring, costs for closing and opening financial accounts, and damages for emotional distress.” Amburgy, at 5. The district court observed that federal courts have reached different conclusions as to whether individuals have Article III standing to prosecute such lawsuits, though the “recent trend” has been to find that standing exists based on a Seventh Circuit decision in Pisciotta v. Old Nat’l Bancorp., 499 F.3d 629 (7th Cir. 2007). See id., at 5-7. But the court explained at page 7, “because the requirement of standing is firmly rooted in the Constitution and is not subject to whim, the undersigned is reluctant to look to a ‘recent trend’ when analyzing whether or not a party has standing to sue in federal court.” Accordingly, it examined the standing issue with fresh eyes.

Full post as published by Class Action Defense Blog on December 08, 2009 (boomark / email).