Peters v. St. Joseph Services Corp.
74 F. Supp. 3d 847
S.D. Tex.2015Background
- Peters sues St. Joseph for data breach-related damages under FCRA and state tort/contract claims in a Texas-based case; jurisdiction hinges on Article III standing, not diversity.
- St. Joseph disclosed a December 2013 breach affecting Peters and about 405,000 others; the breach involved exposure of personal information on St. Joseph's network.
- St. Joseph offered one year of free credit monitoring post-breach, automatically enrolled affected individuals without action.
- Peters alleges specific incidents of identity theft/fraud and ongoing risk due to the breach; she seeks injunctive relief and statutory damages.
- Court concludes Peters lacks Article III standing because heightened risk of future harm is not 'certainly impending' and not tied causally/redressably to St. Joseph’s conduct; grants Rule 12(b)(1) dismissal with prejudice of federal claims.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Whether heightened risk of future identity theft confers standing. | Peters argues increased risk is an injury-in-fact under standing standards. | St. Joseph contends risk is not certain or imminent, failing standing. | No standing; risk not certainly impending. |
| Whether Peters’ alleged actual injuries satisfy standing requirements. | Injuries stem from breach and are traceable to St. Joseph’s failures under FCRA. | Injuries are the result of independent third-party actions and not redressable by court relief. | Injuries not cognizable; federal claims dismissed. |
Key Cases Cited
- Clapper v. Amnesty Int’l USA, 133 S. Ct. 1138 (U.S. 2013) (threatened injury must be certainly impending; increased risk alone is insufficient)
- Susan B. Anthony List v. Driehaus, 134 S. Ct. 2334 (U.S. 2014) (imminence standard for standing clarified)
- Lujan v. Defenders of Wildlife, 504 U.S. 555 (U.S. 1992) (standing requires concrete, particularized injury fairly traceable to defendant)
- Reilly v. Ceridian Corp., 664 F.3d 38 (3d Cir. 2011) (increased risk alone not sufficient for standing; must be imminent or certainly impending)
- Krottner v. Starbucks Corp., 628 F.3d 1139 (9th Cir. 2010) (data breach standing split; prior decisions not controlling after Clapper)
- Pisciotta v. Old Nat. Bancorp, 499 F.3d 629 (7th Cir. 2007) (data breach standing split; distinguished medical/toxic/environmental injury contexts)