State of Rhode Island v. Alphabet, Inc., 1 F.4th 687

Background

In March–April 2018 Google discovered a long‑running Google+ software glitch (the "Three‑Year Bug") and other security vulnerabilities (the "Privacy Bug") that may have exposed private profile data to third‑party developers and left Google unable to determine full scope. Google’s legal/policy team prepared a memo warning disclosure would trigger regulatory scrutiny and congressional testimony.
Senior executives (Sundar Pichai and others) reviewed the Privacy Bug Memo; Google decided not to disclose the problems publicly and moved to shut down the consumer Google+ product.
Alphabet filed Form 10‑Q reports in April and July 2018 stating there had been "no material changes to our risk factors" and otherwise reiterating commitments to security/privacy, but did not disclose the Privacy Bug.
In October 2018 the Wall Street Journal revealed Google’s discovery and concealment; Alphabet’s stock fell and regulators and lawmakers pressed the company; a later December disclosure revealed a larger Google+ exposure.
The State of Rhode Island (consolidated lead plaintiff) sued under §10(b)/Rule 10b‑5 and §20(a), alleging material omissions and a scheme to conceal. The district court dismissed for failure to plead a material misrepresentation/omission and scienter. The Ninth Circuit reversed in part, affirmed in part, vacated and remanded.

Issues

Issue	Plaintiff's Argument	Defendant's Argument	Held
Material omission in April & July 2018 Form 10‑Qs	Omitted disclosure of the Privacy Bug (known internally) made the "no material changes" risk‑factor statement misleading; Privacy Bug was material under reasonable‑investor standard and SEC cybersecurity guidance.	Bug was remediated before the filings, no sensitive financial/medical data released, no user harm, strong business performance—so omission not material.	Ninth Circuit: omission plausibly material; dismissal reversed as to the 10‑Q claims.
Scienter for 10‑Q omissions	Executives (Pichai) read the memo; Pichai informed Page; leadership chose deliberate concealment to avoid scrutiny—supports a strong inference of intent/deliberate recklessness.	No suspicious insider trading, no confidential‑witness corroboration; remediation indicates negligence not intent.	Ninth Circuit: allegations (memo, corporate structure, decision to conceal) give a cogent, compelling inference of scienter; reversal.
Other public statements (earnings calls, general privacy/security assurances)	General assurances were misleading in light of contemporaneous concealment.	Statements are puffery/forward‑looking and not concrete misstatements of present fact.	Ninth Circuit: these statements are nonactionable puffery; dismissal as to them affirmed.
Rule 10b‑5(a)/(c) scheme claims and §20(a) control‑person claims	Defendants engaged in a continuous course of conduct to conceal and disseminated misleading statements; scheme liability and control liability pleaded.	Defendant argued claims were waived or duplicative and not properly pursued below.	Ninth Circuit: sua sponte dismissal of (a)/(c) claims was error; reversed and remanded. §20(a) claims tied to (a)/(c) remanded for reconsideration.

Key Cases Cited

Janus Capital Group, Inc. v. First Derivative Traders, 564 U.S. 135 (2011) (who is the "maker" of a statement for Rule 10b‑5(b)).
Tellabs, Inc. v. Makor Issues & Rights, Ltd., 551 U.S. 308 (2007) (holistic Tellabs analysis for pleading scienter and weighing competing inferences).
Matrixx Initiatives, Inc. v. Siracusano, 563 U.S. 27 (2011) (materiality and omission standard; "total mix" concept).
Basic Inc. v. Levinson, 485 U.S. 224 (1988) (materiality measured by effect on the total mix of information).
Lorenzo v. SEC, 139 S. Ct. 1094 (2019) (overlap among Rule 10b‑5 subsections; dissemination liability under (a) and (c)).
Ernst & Ernst v. Hochfelder, 425 U.S. 185 (1976) (scienter implicated by §10(b) "manipulative or deceptive" language).
In re NVIDIA Corp. Sec. Litig., 768 F.3d 1046 (9th Cir. 2014) (discusses SEC interpretive guidance and securities‑fraud pleading standards).
Retail Wholesale & Dep’t Store Union Loc. 338 Ret. Fund v. Hewlett‑Packard Co., 845 F.3d 1268 (9th Cir. 2017) (puffery vs. actionable misstatements; materiality analysis).
Berson v. Applied Signal Tech., Inc., 527 F.3d 982 (9th Cir. 2008) (risk disclosures can mislead when risks have already materialized).
South Ferry LP v. Killinger, 542 F.3d 776 (9th Cir. 2008) (access to disputed information supports scienter inference).
In re ChinaCast Educ. Corp. Sec. Litig., 809 F.3d 471 (9th Cir. 2015) (corporate scienter may be imputed from senior officers acting within apparent authority).