440 F.Supp.3d 30
D.D.C.2020Background
- Guo Wengui, a prominent Chinese dissident seeking U.S. asylum, retained Clark Hill, PLC and partner Thomas Ragland and paid a $10,000 retainer.
- Guo warned the firm repeatedly of targeted, sophisticated cyberattacks and requested special precautions (including not placing his materials on the firm server).
- Clark Hill allegedly represented it would protect Guo’s confidential files but stored his asylum application and passport numbers on its servers and transmitted them by firm email.
- On September 12, 2017, Clark Hill’s system was hacked (attributed to actors associated with the Chinese government) and Guo’s confidential materials were published on social media.
- Clark Hill withdrew from representation on September 19, 2017, citing ethical concerns that attorneys would be necessary witnesses; Guo filed suit in D.C. Superior Court (removed to D.D.C.) asserting breach of fiduciary duty, breach of contract, legal malpractice, and punitive damages.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Liability for cyberattack: did misrepresentations and inadequate security breach fiduciary, malpractice, and contract duties? | Clark alleges the firm promised special protections and then placed his sensitive files on the server, leading to foreseeable theft and harm. | Clark Hill says no actionable misrepresentation or duty breach; attacks were third-party events and harm is speculative. | Court denied dismissal: plausible misrepresentation/negligence re handling of confidential info; actual harm alleged (publication and use of materials). |
| Withdrawal: did firm’s post-hack withdrawal breach duties or cause recoverable harm? | Clark contends withdrawal unduly delayed and prejudiced his asylum process and thus caused damages. | Firm asserts withdrawal was ethically required (advocate-witness conflict, investigation conflicts) and permitted by Rules/retainer. | Court dismissed claims to the extent they rely on withdrawal: no adequately pleaded injury from withdrawal (application already filed; no difficulty finding successor counsel alleged). |
| Breach of contract: did the engagement letter or oral assurances create contractual breach? | Guo alleges breach via incompetent representation and failure to follow promised security procedures; may rely on extrinsic oral promises. | Defendants say no contractual violation; retainer allows withdrawal for ethics/conflict and contains scope provisions. | Court allowed contract claim to proceed as to mishandling of information but said plaintiff must clarify which contractual theory he pursues (written term, oral amendment, or implied duty). |
| Punitive damages: are they available for defendants' conduct? | Guo seeks punitive relief for alleged outrageous, deliberate conduct. | Defendants argue allegations show at most incompetence or negligence, not malice. | Court dismissed punitive-damages count: complaint fails to allege the requisite malice, fraud, or willful misconduct. |
Key Cases Cited
- Seed Co., Ltd. v. Westerman, 840 F. Supp. 2d 116 (D.D.C. 2012) (tort claim requires an act causing loss)
- Randolph v. ING Life Ins. & Annuity Co., 973 A.2d 702 (D.C. 2009) (increased risk of future identity theft is not actionable injury)
- Bell Atl. Corp. v. Twombly, 550 U.S. 544 (2007) (plausibility pleading standard)
- Ashcroft v. Iqbal, 556 U.S. 662 (2009) (pleading standard for plausibility)
- Attias v. CareFirst, Inc., 365 F. Supp. 3d 1 (D.D.C. 2019) (data-breach duty discussion)
- Zauderer v. Office of Disciplinary Counsel, 471 U.S. 626 (1985) (lawyers’ professional obligations and standards)
- Biomet Inc. v. Finnegan Henderson LLP, 967 A.2d 662 (D.C. 2009) (attorneys not liable for honest mistakes)
- Swann v. Waldman, 465 A.2d 844 (D.C. 1983) (sufficient allegations for legal malpractice survive dispositive motion)
- Choharis v. State Farm Fire & Cas. Co., 961 A.2d 1080 (D.C. 2008) (tort claims distinct from contract claims must arise independently)
- Hendry v. Pelland, 73 F.3d 397 (D.C. Cir. 1996) (punitive damages against attorneys require fraud, recklessness, or willful disregard)