3:23-cv-00176
D.N.D.May 22, 2024Background
- Plaintiffs, whose personal information was provided to defendant Brady Martz & Associates, P.C. (an accounting firm) through clients (not directly), filed a class action over a November 2022 data breach.
- The breach involved cybercriminals accessing Brady Martz's network and allegedly stealing large amounts of personal and sensitive information.
- Plaintiffs asserted claims for negligence, negligence per se, unjust enrichment, declaratory judgment, violation of the Massachusetts Consumer Protection Act (MCPA), and violation of North Dakota Century Code § 51-22-02.
- The complaint was challenged by Brady Martz in a motion to dismiss, arguing lack of jurisdiction and failure to state a claim under Fed. R. Civ. P. 12(b)(1) and 12(b)(6).
- The district court reviewed the claims under North Dakota, Minnesota, and Massachusetts law, relevant to the class and statutory causes of action asserted.
- The court both granted and denied parts of the motion, allowing some claims to proceed while dismissing others.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Negligence | Brady Martz owed a duty to safeguard personal info | No plausible duty alleged; no special relationship | Sufficiently pleaded; claim survives |
| Negligence Per Se | FTC Act violation is negligence per se under MN law | FTC Act has no private right; not actionable per se | Dismissed; can't use FTC Act for negligence per se |
| Unjust Enrichment | Defendant was unjustly enriched by retaining benefits of data | No direct relationship or benefit conferred by plaintiffs | Dismissed due to lack of direct relationship |
| MA Consumer Protection Act | Defendant’s acts/deceptive conduct support MCPA claim | Conduct didn’t occur “primarily and substantially” in MA | Dismissed; facts insufficient for Massachusetts conduct |
| ND § 51-22-02 Illegal Disclosure | Defendant "disclosed" by failing to prevent data theft | Disclosure means active transfer/publishing, not inaction | Dismissed; inaction isn't actionable disclosure |
| Declaratory Judgment | Ongoing and future risk justifies declaratory/injunctive relief | No injury in fact; no standing | Standing sufficiently alleged; claim survives |
| Addition of Plaintiff | Adding class plaintiff was proper | Procedurally improper; added without leave | Allowed; no prejudice to defendant |
Key Cases Cited
- Bell Atl. Corp. v. Twombly, 550 U.S. 544 (Complaint must state a claim that is plausible on its face)
- Barbie v. Minko Constr., Inc., 766 N.W.2d 458 (North Dakota negligence elements)
- Jupin v. Kask, 447 Mass. 141 (Massachusetts law on duty in negligence)
- Domagala v. Rolland, 805 N.W.2d 14 (Minnesota law on duty in negligence)
- Schmanski v. Church of St. Casimir of Wells, 67 N.W.2d 644 (Minnesota negligence elements)