585 F.Supp.3d 128
D. Mass.2022Background
- In November 2018 a Barracuda employee allegedly left a data port open during a migration, allowing unauthorized access to PHI of ~277,000 Zoll patients; discovery of the exposure was delayed for about seven weeks.
- Fusion (via an OEM Agreement with Sonian/Barracuda) provided hosting services to customers including Zoll; Zoll contracted separately with Fusion for hosting.
- Zoll sued Barracuda in 2020 asserting negligence, contract and other claims; Fusion intervened asserting eight counts against Barracuda in 2021.
- Fusion earlier entered bankruptcy and litigated/arbitrated related claims; following a settlement Fusion, Zoll, and insurers assigned certain claims to Axis, which moved to be joined/substituted as plaintiff.
- Barracuda moved to dismiss Fusion’s intervenor complaint for failure to state claims; Zoll/Fusion moved to substitute Axis as plaintiff.
- The court allowed dismissal of Counts III, IV, V, VI, VII and VIII of Fusion’s intervenor complaint, denied dismissal as to the contract claim (Count I) and the implied covenant (Count II), and permitted Axis to be joined as plaintiff while retaining Zoll and Fusion until their interests are clarified.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Breach of contract (Count I): condition precedent | Fusion: Hosting Agreement substantially conformed to OEM Exhibit B; Barracuda waived right to insist on strict compliance. | Barracuda: OEM required specific terms in Fusion's customer contracts; Hosting Agreement lacked required indemnity and $1,000 liability cap so condition precedent unsatisfied. | Court: Hosting Agreement did not satisfy the OEM condition precedent on its face, but Fusion plausibly alleged waiver by Barracuda from long-standing inaction, so breach claim survives. |
| Breach of implied covenant (Count II) | Fusion: Barracuda understated scope, delayed notice, and obstructed investigation, showing bad faith. | Barracuda: Allegations amount to human error, not lack of good faith. | Court: Allegations sufficient at pleading stage to permit inference of lack of good faith; claim survives. |
| Negligent misrepresentation (Count III) | Fusion: Barracuda made false/misleading statements about the breach that Fusion relied on to its detriment. | Barracuda: Any false statements did not cause Fusion's harm separate from the breach itself. | Court: Dismissed — plaintiff failed to allege pecuniary loss caused by the statements distinct from the data breach. |
| Tortious interference (Count IV) | Fusion: Post-breach conduct interfered with Fusion’s contracts/relations. | Barracuda: Fusion did not allege improper motive/means or harm separate from the breach. | Court: Dismissed — no allegation of independent harm or requisite impropriety. |
| Indemnification (Counts V & VI) | Fusion: OEM relationship and circumstances support implied contractual and tort-based indemnity. | Barracuda: OEM expressly indemnifies Barracuda only; no implied right in Fusion; Fusion hasn’t been held liable in tort. | Court: Dismissed — no implied contractual indemnity; tort-based indemnity inappropriate because Fusion’s exposure is contractual, not tort-based. |
| Breach of implied warranties (Counts VII & VIII) | Fusion: Product/service warranties were breached by failing to secure data. | Barracuda: OEM contained valid waiver of implied warranties. | Court: Dismissed — warranty claims barred by waiver in the OEM Agreement (holding consistent with prior ruling as to Zoll). |
| Substitution/joinder of Axis (Rule 25) | Fusion/Zoll: Settlement assigned claims to Axis; Axis is real party in interest and should be substituted/joined. | Barracuda: Settlement and assignment not produced; legal effect unclear. | Court: Allowed joinder/substitution of Axis as plaintiff/intervenor but declined to dismiss Zoll and Fusion until the assignment documents are shown and interests clarified. |
Key Cases Cited
- Ashcroft v. Iqbal, 556 U.S. 662 (pleading standard; plausibility requirement)
- Bell Atl. Corp. v. Twombly, 550 U.S. 544 (pleading standard; plausibility framework)
- Bulwer v. Mount Auburn Hosp., 46 N.E.3d 24 (Mass. 2016) (elements of breach of contract under Massachusetts law)
- Araujo v. Woods Hole, Martha's Vineyard, Nantucket S.S. Auth., 693 F.2d 1 (1st Cir. 1982) (theories of indemnification)
- Potvin v. Speedway, LLC, 891 F.3d 410 (1st Cir. 2018) (Rule 25 substitution/joinder discretion)
- Psy-Ed Corp. v. Klein, 947 N.E.2d 520 (Mass. 2011) (elements of tortious interference under Massachusetts law)