MEMORANDUM OPINION
Defendants’ Motion to Dismiss, ECF No. 10 — granted in part and denied in Part
Presently before the Court is the Motion to Dismiss of Defendants The Coca-Cola Company, Coca-Cola Refreshments USA, Inc., Keystone CocarCola and Bottling and Distribution Corporation, Keystone Coca-Cola Bottling Company,. Inc., Keystone Coca-Cola Bottling Co,, and Keystone Coca-Cola Bottling Corporation (“the Coke Defendants”). ECF No. 10. The Coke Defendants seek to dismiss each of Plaintiff Shane K. Enslin’s state law and federal law claims. First, pursuant to • Rule 12(b)(1), the Coke Defendants argue that Plaintiff has not properly alleged an actual case or controversy, depriving this court of subject matter jurisdiction to hear his claim. Second, pursuant to Rule 12(b)(6), the Coke Defendants move to-dismiss all ten of Plaintiff’s claims for failing to state a claim upon which relief can be granted. The Court finds that Plaintiff has standing to advance his claims, and for the following reasons, the Court grants in part and denies in part Defendants’ Motion to Dismiss.
I. Background
This action arises out of the theft of fifty-five laptops allegedly containing the personal identification information (“PII”) of Plaintiff and 74,000 other current and former employees of the Coke Defendants. Compl. ¶¶ 2, 31, 44.
Plaintiff was hired by Defendant Keystone Coca-Cola Bottling Company (“Keystone Coke”) in 1996 as a service technician assigned, to the Poconos region of Pennsylvania. Id. ¶¶ 16, 49. As part of his employment, Plaintiff was required to provide Keystone Coke with his PII. Id. This PII included Plaintiff’s Social Security number (“SSN”), address, bank account information, credit card numbers, driver’s license information, and motor vehicle records. Id. ’ ¶¶ 32, 49. Plaintiffs PII was stored by Keystone Coke on one or more laptop computers in an unencrypted format. Id. ¶¶ 16, 31. During his term of employment, the Coke Defendants represented to Plaintiff that, in exchange for his employment, his PII would be securely retained. Id. ¶ -42. In 2007, after eleven
On December 31, 2007, Defendant Coca-Cola Enterprises (“CCE”) acquired Keystone Coke as a subsidiary of CCE. Id. ¶ 18. In 2010, The Coca-Cola Company (“Coca-Cola Co.") acquired CCE. Id. ¶ 2. While it is unclear which Coke. Defendant controlled Plaintiffs PII at each of the relevant times in Plaintiffs complaint, eventually “laptops assigned to current CCR
Over a nearly six-year period, beginning in January 2007 and continuing through November 2013, approximately fifty-five of these laptop computers were stolen from CCE. Id. ¶¶ 2, 44. The stolen laptops allegedly contained the PII of over 74,000 people, including Plaintiff. Id. ¶¶ 2, 31, 44. On November 17, 2013, the Coke Defendants discovered that the theft had occurred and undertook efforts to recover the stolen laptops. Id. ¶ 45. By December 10, 2013, the Coke Defendants had recovered all fifty-five stolen laptops. Id.
The Coke Defendants determined that Thomas William, Rogers, an employee of CCE responsible for retaining or destroying the laptops,- was responsible for the theft of the laptops. Id. ¶¶ 24, 44. Rogers was arrested on June 14, 2014, by Cobb County police and stands charged with felony and misdemeanor theft by taking. Id. Plaintiff alleges that, from these stolen laptops, various, unknown identity thieves were able to gain access to Plaintiffs PII. Id. ¶¶ 25-29, 49. '
On February 23, 2014, CCE and Coca-Cola Co. sent a letter to Plaintiff, notifying him of the theft of-the laptops and informing him that these laptops may have contained his PII. Id. ¶ 46; id. Ex. A, at 1. The letter also offered Plaintiff a one-year subscription of credit monitoring service. Id. ¶ 47; id. Ex. A, at 1.
- A few months after receiving this notification letter, Plaintiff alleges he began to experience unauthorized uses of his finances and identity by unknown persons (“Identity thieves”). Id. ¶ 50. Identity thieves fraudulently purchased $958.44-of merchandise from Bloomingdale’s, Inc., and had the merchandise shipped to an address in Staten Island, New York. Id. ¶ 51. The same identity thieves then used money from Plaintiffs checking account to pay this bill. Id. Plaintiff was forced to close that account, incurring a $17.00 charge. Id.
On April 8, 2014,. the same identity thieves ordered $825.86 of merchandise from Fingerhut, an online retailer, and had this merchandise shipped to the same Staten Island address. Id. ¶ 52. The identity thieves also attempted to change the addresses for each of Plaintiffs bank accounts to the same address in Staten Island. Id. Plaintiff and his,wife expended numerous hours attempting to correct these attempted address changes. Id. Also on April 8, 2014 there was fraudulent activity on two of Plaintiffs Capitol One branded credit cards and his Best Buy credit card. Id. ¶ 53. “With these accounts, the [identity thieves] attempted to pay the outstanding balances from [Plaintiffs] checking account.” Id. At various times during these events, the same identity thieves also tried to open new credit eards in Plaintiffs name. Id. ¶ 54. The identity
On July 4, 2014, an identity thief was able to obtain a job at United Parcel Service of'America (“UPS”) using Plaintiffs name. Id. ¶ 59. On July 7, 2014, the identity thieves used newly-opened credit card accounts, opened in Plaintiffs name, to make overseas purchases in the Republic of Ireland. Id. ¶ 58. Shortly thereafter, COE and Coca-Cola Co. contacted Plaintiff and offered him an upgrade to the credit monitoring service originally provided to him. Id. ¶ 60.
Plaintiff brings ten claims on behalf of himself and all others similarly situated. Plaintiff alleges (1) violation of the Driver’s Privacy Protection Act, 18 U.S.C. § 2724 (2012), (2) negligence, (3) negligent misrepresentation, (4) fraud, (5) breach of express contract, (6) breach of implied contract, (7) breach of covenant of good faith and fair dealing, (8) unjust enrichment, (9) bailment, and (10) civil conspiracy. Plaintiff claims that he has suffered these injuries due to the negligence of the Coke Defendants in retaining and safeguarding his PII.' Compl. ¶¶ 87-90. He further alleges that the Coke Defendants breached their contractual relationship with him when they failed to maintain the security of his PII. Id. ¶¶ 105-29. Plaintiff claims that, after the theft of the laptops containing his PII, the Coke Defendants engaged in misrepresentation, fraud, and conspiracy against him by failing to disclose the true extent of the data breach. Id. ¶¶ 91-104, 134-38. Finally, Plaintiff argues that among his lost PII was his personal driver information, the loss of which constitutes a violation of the Driver’s Privacy Protection Act. 18 U.S.C. § 2724 (2012); id. ¶¶ 76-86. Plaintiff seeks actual, punitive, treble, and statutory damages for these harms. Compl, ¶¶ 36-37.
II. Legal Standard
A. Motion to dismiss for lack of standing pursuant to Rule 12(b)(1)
A defendant may move to dismiss an action for lack of subject matter jurisdiction pursuant to Rule 12(b)(1) if the plaintiff lacks standing under. Article III of the constitution. Steel Co. v. Citizens for a Better Env’t,
First, the, plaintiff must have suffered an “injury-in-fact” — an invasion of a legally protected interest which is (a) concrete and particularized and (b) actual or imminent, not conjectural or hypothetical. Second, there must be a causal connection between the injury and the conduct complained of — the injury has to be fairly traceable to the challenged action of the defendant, and not the result of the independent action of some third partynot before the court. Third, it must be likely, as opposed to merely speculative, that the injury will be redressed by a favorable decision.
Lujan v. Defenders of Wildlife,
Each of these elements and the terms used to describe them “cannot be defined so as to make application of the constitutional standing requirement a mechanical exercise.” Allen v. Wright,
It is the plaintiffs burden to demonstrate these three elements of standing, and if the plaintiff is unable to establish any element of this test, the .claim must be dismissed. Danvers Motor Co., Inc, v. Ford Motor Co.,
When a question of standing is raised-in a putative class action, “named plaintiffs who represent a class must allege and show that they personally have been injured, not that injury has been suffered by other, unidentified members of the class to which they belong and which they purport to represent.” Lewis v. Casey,
B. Motion to dismiss for failure to state a claim pursuant to Rule 12(b)(6)
The defendant bears- the burden of demonstrating that a plaintiff has failed to state a claim upon which relief can be granted. Hedges v. United States,
In Bell Atlantic Corp. v. Twombly,
First, the Court observed, “the tenet that a court must accept as true all of the allegations contained in a complaint is inapplicable to legal .conclusions.” Id. at 678,
Second, the Court emphasized, “only a complaint that states a plausible claim for relief survives a motion to dismiss. Determining whether a complaint states a plausible claim for relief ... [is] a context-specific task that requires the reviewing court to draw on its judicial experience and common sense.” Id. at 678,
“The plausibility standard is not akin to a ‘probability requirement,’” but there must be “more than a sheer possibility that a defendant has acted unlawfully.” Id. at 678,
III. Plaintiff’s allegations are sufficient to establish constitutional standing.
The Coke Defendants attack Plaintiff’s standing under the first two elements of the standing test: injury-in-fact and causal connection. Defs.’ Mem. Supp. Mot. Dismiss 5-16, ECF No. 10-1. First, the Coke Defendants assert that all future harms that Plaintiff may suffer from the loss of his PII and the preparations he has made in anticipation of these harms are speculative, hypothetical, and not an injury-in-fact. Id. Second, the Coke Defendants claim that even if Plaintiff has suffered an injury-in-fact from' the alleged misuse of his PII that has already occurred, these injuries are not fairly traceable to the conduct of the Coke Defendants and the claim should therefore be dismissed, for if Plaintiff cannot show a causal connection between his eomplained-of injuries and the Coke Defendants conduct, he does not have standing to assert his claims. Id. This Court will discuss each challenge to Plaintiffs standing in turn. .
A. Plaintiff has. sufficiently alleged an injuiy-in-fact. .
First, the Coke Defendants argue that all of Plaintiffs claims are founded on future harms or increased risk of future harm, rather than any injury-in-fact, and therefore should be dismissed. Defs.’ Mem. Supp. Mot. Dismiss 11.
An injury-in-fact sufficient to establish Article III standing must be “distinct and palpable” as opposed to “abstract,” and the “alleged harm must be actual or imminent, not conjectural or hypothetical.” Whitmore v. Ark.,
In Clapper v. Amnesty Int’l, USA, the Supreme Court found that for a risk of future harm to constitute an injury-in-fact, the future harm must be “certainly impending.” — U.S.-,
Here, Plaintiffs harms are not “future harms,” but ongoing, present, distinct, and palpable harms. See Clapper,
Indeed, the court in FTC v. Wyndham Worldwide Corp.,
The Coke Defendants also argue that Plaintiff lacks standing because his efforts to combat his exposure to future harms do not constitute an actionable injury-in-fact. Defs.’ Mem. Supp. Mot. Dismiss 14.
Plaintiffs “cannot manufacture standing by choosing to make expenditures based on hypothetical future harm that is not certainly impending.” Clapper,
As this Court has observed, Plaintiffs injuries and attempt to prevent future, similar injuries are not founded on “speculative” or “hypothetical” concerns. Id. The Reilly court found that plaintiffs who incurred expenses monitoring their accounts and protecting their personal and financial information “[without] any -.actual injury (e.g. because their private information was misused or their identities stolen)” lacked standing because “[s]uch misuse is only speculative — not imminent.” Id. Here, Plaintiff incurred an expense in connection with his action to close his bank account in response to unauthorized access. Compl. ¶ 51. Plaintiff also expended time and effort protecting other credit cards and bank accounts from the identity thieves, id. ¶ ¶ 50-61, which Plaintiff did in response to ongoing harms, not harms that were merely “hypothetical.” See Reilly,
B. Plaintiff has alleged a sufficient causal relationship between Plaintiff’s injuries and Defendants’ alleged conduct.
The Coke Defendants assert that Plaintiffs harms are not causally connected-to their conduct, which deprives Plaintiff of Article III standing. Defs.’ Mem. Supp. Mot. Dismiss 7. The Coke Defendants make three arguments in support: first, the time period between the end of Plaintiffs employment with Keystone Coke (2007) and the start of the misuse of Plaintiffs PII (2014) is too great to fairly trace Plaintiff’s injuries to the conduct of the Coke Defendants. Id. 7-9. Second, no Coke Defendant (besides Plaintiffs, employer, Keystone Coke) had any relation to the harm suffered sufficient to confer standing. Id. 7-11. Third, the information lost on the laptops was insufficient to give rise to the types of harms Plaintiff suffered. Id. 8-11. The Court will discuss.each of the arguments in turn.
“The ‘case or controversy’ limitation of - Article III still' requires that a federal court act only to redress injury that fairly can be traced to the challenged action of the defendant, and not injury that results from the independent action of some third party not before the court.” Simon v. E. Ky. Welfare Rights Org.,
First, the Coke Defendants argue that Plaintiffs injuries are not fairly traceable to the Cóke Defendánts because Plaintiffs ’ employment with Keystone Coke ended more than seven years ago and his data was not allegedly misused until recently. Defs.’ Mem. Supp. Mot. Dismiss 7-11. The Court does not agree;
' The Coke Defendants frame this argument as an attack on Plaintiffs ability to show “but for” causation, claiming that, because of the passage of time, there is no “but for” connection between Plaintiffs stolen identity and the loss of his PII by the Coke. Defendants. Defs.’ Mem. Supp. Mot. Dismiss 7-11. Plaintiff, however, needs only “general,factual allegations of injury resulting from the defendant’s conduct.” Lujan, 504; U.S. at 561,
Where courts have dismissed claims for lacking the requisite presence of “but for” causation, the dismissal is generally based on the conclusion that “the links in the chain of causation;.. are far too weak for the chain as a whole to sustain respondents’ standing.” Allen,
Next, the Coke Defendants argue that no Coke Defendant other than Plaintiffs direct employer, Keystone Coke, had any relation to Plaintiff or-his PII, so Plaintiffs harm cannot be fairly traced to the other Coke Defendants’ alleged misconduct. Defs.’ Mem. Supp. Mot. Dismiss 8-9.
The Coke Defendants largely rely on Polanco v. Omnicell, Inc.,
But Sentara’s position is not analogous to the position of any of the Coke Defendants. Plaintiff has plausibly alleged that each Coke Defendant either held or transferred Plaintiffs .PII at some time during the events that allegedly led to Plaintiffs injuries. Compl. ¶¶ 15-19. Keystone Coke, Plaintiffs employer, was a subsidiary of CCE by the end of 2007. Id. ¶ 18. In 2010, Coca-Cola Co. purchased the North American operations of CCE.,Id. ¶ 19. Plaintiffs PII was then given to CCR by Coca-Cola Co. and allowed to reside on “laptops assigned to current CCR and former CCE users.” Id. ¶¶ 2, 4-6, 44, 49; id. Ex. A, at 1.
’ Courts analyzing cases involving the loss of PII have consistently declined to dismiss claims on the basis of a lack of a sufficient causal connection where the defendant has some direct control over the plaintiffs PII. See, e’g., In re Adobe Systems, Inc. Privacy Litigation,
Here, Plaintiff plausibly alleges that each Coke Defendant had direct control over the laptop or laptops containing his PII at some time prior to the theft. Compl. ¶¶ 15-19, 44. Furthermore, Plaintiff has factually alleged that all of the named Coke Defendants contractually agreed to protect his PII. Id. ¶¶ 42, 105-29. He has further alleged that he was misled, conspired against, and defrauded by all of the Coke Defendants in connection .with the loss of his PII. Id. ¶¶ 91-138. As such, this court cannot accept the Coke Defendants’ argument that the loss of Plaintiffs PII is not fairly traceable to anyone but Plaintiffs direct employer, Keystone Coke.
Finally, the Coke Defendants argue the PII held by the Coke Defendants was insufficient to enable the identity thieves to commit the types of identity attacks on Plaintiffs identity that he allegedly suffered, such that Plaintiffs injury is not fairly traceable to the conduct of the Coke Defendants.; Defs.’ Mem. Supp. Mot. Dismiss 9-10.
The Coke Defendants supply reasoning from In re Science .Applications International Corp. (SAIC) Backup Tape Data Theft Litigation., wherein the court decided that even the plaintiffs who had suffered an injury-in-fact from identity attacks following a loss of their personal information had failed to demonstrate .that the harm they suffered was fairly traceable to the conduct of the defendants.
Defendants further argue that Plaintiff did not provide his Mac/s and Fingerhut credit card information to the Coke Defendants, so any unauthorized access of these cards cannot be fairly traced to the conduct of the Coke Defendants. Defs.’ Mem. Supp. Mot. Dismiss 9-10. Plaintiffs have been found to lack standing in data breach cases where the stolen data cannot be used to create the specific types of harm the plaintiffs have suffered: “[Plaintiffs] current credit card information.. .was not on the stolen laptops... Thus, any harm stemming from the fraudulent use of [plaintiffs] current credit card is not ‘fairly traceable’ to [the defendant].” Horizon Healthcare Services,
Nevertheless, Plaintiff has sufficiently pled other types of harms including unauthorized access to his bank account and other -unauthorized uses of his identity that could be fairly traced to the PII allegedly lost by the Coke Defendants. Compl. ¶¶ 50-65. Although “plaintiffs must demonstrate standing for each form of relief sought,” this does not mean plaintiffs must establish each of their damage claims at the pleadings stage in-order to have standing to assert their claims. Friends of the Earth, Inc, v. Laidlaw Envtl. Servs (TOC), Inc.,
Thus, Plaintiff has successfully alleged he has suffered an injury-in-fact that is fairly traceable to the conduct of the Coke Defendants. As such, Plaintiff has shown he has constitutional Article III standing under 12(b)(1) sufficient to advance his claims in this Court.
IV. Defendants’ motion to dismiss for failure to state a claim
A. Plaintiff has failed to state a claim for a violation of the Driver’s Privacy Protection Act.
Plaintiff asserts a cause of action under the Driver’s Privacy Protection Act
The DPPA prohibits the disclosure of a person’s driving information (“PDI”) by a state department of motor vehicles or any officer, employee, or contractor thereof. 18 U.S.C. § 2721 (2012). PDI includes an “individual’s photograph, social security number, driver identification number, name, address (but not the 5-digit zip code), telephone number,' and medical or disability information...” Id. 2725(3). The DPPA also prohibits a business from disclosing PDI for a use that is not included in the list of permissible uses enumerated by the Act. Id. 2721(b)(3). Section 2724(a) of the DPPA creates civil liability for a defendant who “(1) knowingly obtains, discloses, or uses personal information; (2) from a motor vehicle record; and (3). for a purpose not permitted.” Id. 2724(a).
The Coke Defendants argue that Plaintiff voluntarily provided his PDI‘ to the Coke Defendants, so they are not liable under the DPPA. Defs.’ Mem. Supp. Mot. Dismiss 16-19. The Coke Defendants cite to numerous cases to support their argument that PDI provided voluntarily by individuals, rather than disclosed by state departments or agencies, is not subject to the restrictions of the DPPA. Id. at 18 (citing Hurst v. State Farm Mut. Auto. Ins. Co., No. 10-1001,
A disclosure of PII constitutes a violation of the DPPA only if that disclosure was a “knowing disclosure.” 18 U.S.C. § 2724(a). A “knowing disclosure” of PDI requires the defendant to take some “voluntary action” to disclose the information. Senne v. Vill. of Palatine, Ill.,
In Senne, traffic citations containing PDI were placed on the windshields of the plaintiffs’ cars. Id. at 602-03. The PDI was thus displayed in a public manner, available for all pedestrians and passersby to see. Id. Here, Plaintiffs PDI was not displayed to the public, but kept within, the company and its subsidiaries on unsecured laptops. See Compl. ¶¶ 16, 24, 80, 81. Although the Coke Defendants may have been able to take further precautions to protect Plaintiffs PDI, unsecured information on privately held laptops is far different from “placing the, information on the windshield of the vehicle in plain view on a public way... ” See Senne,
The Court is equally unpersuaded by Plaintiffs argument that the theft of the PDI constituted a “knowing disclosure” by the Coke Defendants. See 18 U.S.C. § 2724(a); Compl. ¶¶ 76-86. The theft of Plaintiffs PDI cannot be characterized as a “voluntary action” taken by the Coke Defendants to disclose that information. See Pichler,
Plaintiff asserts in his opposition to the Coke Defendants’ motion that the Coke Defendants transfer of the laptop or laptops containing his PII between different subsidiaries of Coca-Cola Co. amounts to a “voluntary action” giving rise to a “knowing disclosure” under the .DPPA. PL’s Resp. Opp’n. 29-33. However, Plaintiffs Complaint cannot fairly be read to contain such factual allegations. See Eli Lilly & Co. v. Roussel Corp.,
B. Plaintiff has failed to state a claim for negligence.
To state a claim for negligence under Pennsylvania law, a Plaintiff must allege: “(1) a duty recognized by law, requiring the actor to conform to a certain standard with respect to the injured party; (2) a failure of the actor to conform to that standard; (3) a causal connection between the conduct and the resulting injury; and (4) actual loss or damage to the interests of another.” Felli v. Commw. Dep’t. of Transp.,
“The Economic .Loss Doctrine provides that no cause of action exists for negligence that results solely in econojnie damages unaccompanied by physical injury or property damage.” Adams v. Copper Beach Townhome Communities,. L.P.,
Pennsylvania'courts have found an exception to the Economic Loss Doctrine where the plaintiff and defendant are in a “special relationship.” Valley Forge Convention & Visitors Bureau v. Visitor’s Servs., Inc.,
Plaintiff insists that he was bound in a relationship of special trust with the Coke Defendants when he provided his PII as part of his employment contract. See Pl.’s Resp. Opp’n. 33-35. Plaintiff does not suggest in his Complaint that the Coke Defendants had any “fiduciary duty” to him. Compl. ¶¶ 87-90. Instead, Plaintiff asserts the existence of a standard employment contract between himself and the Coke Defendants. Id. ¶ 106. Courts are hesitant to allow an exception to the Economic Loss Doctrine when the Plaintiff can recover in contract. See, e.g., Sovereign Bank,
Additionally, Plaintiff is unable to provide, any compelling argument that, in his employment contract, he was subject to “undue influence” by the Coke Defendants. Valley Forge,
As with Plaintiffs negligence claim, Plaintiffs claim for negligént misrepresentation is barred'by the Economic Loss Doctrine. Pennsylvania law is clear: “Pennsylvania allows suit for negligent misrepresentation, consistent with Section 552 of the Restatement (Second) of Torts, where such misrepresentation results in harm other than mere economic loss. However, the economic loss doctrine bars claims under Section 552 which result in solely economic loss.” David Pflumm Paving & Excavating, Inc, v. Found. Servs. Co.,
D. Plaintiff has failed to state a claim for fraud.
Under Pennsylvania law, fraud is defined as: “(1). a representation; (2) which is material to the 'transaction at hand; (3) made falsely, with knowledge of its falsity or recklessness as to whether it is true or false; (4) with the intent of misleading another into relying on it; (5) justifiable reliance on the misrepresentation; and (6) the resulting injury was proximately caused by the reliance.” Gibbs v. Ernst,
Plaintiffs Complaint does not indicate the time, place, manner, or name of any specific person who allegedly made fraudulent statements to him. The claim of fraud instead appears to utilize the “shotgun approach,” containing only vague and general- allegations against the Coke Defendants as a collective. See Ethanol Partners,
E.Plaintiff has stated a claim for breach of contract.
Under Pennsylvania law, the elements of breach of an express contract are: “1) the existence of a contract, including its essential terms, (2) a breach of a duty imposed by the contract, and (3) resultant damages.” CoreStates Bank, N.A.
Plaintiff alleges that, as part of his employment contract with the Coke Defendants, there was a “mutual exchange of consideration whereby the Coke Defendants entrusted Plaintiff.. .with access, to the vehicles and equipment for the sale of one of America’s most secure brands, Coca-Cola, in exchange for the promise of employment, with salary, benefits, and secure PII.” Compl. ¶ 106. These allegations are sufficient to support the existence of a contract, as well as its essential terms. See CoreStates Bank,
The essential elements of breach of implied contract are the same as an express contract, except the contract is implied through the parties’ conduct, rather than expressly written. Highland Sewer & Water Auth. v. Forest Hills Mun. Auth.,
F. Plaintiff has failed to state a claim for breach of the covenant of good faith and fair dealing.
“A breach of the covenant of good faith is nothing more than a breach of contract claim and separate causes of action cannot be maintained for each, even in the alternative.”' Rambo v. Greene, No. 03894,
G. Plaintiff has stated a claim in restitution.
Under Pennsylvania law, a claim for liability founded on the unjust enrichment of another requires a showing of “(1) benefits conferred on defendant by plaintiff; (2) appreciation of such benefits by defendant; and (3) acceptance and retention of such benefits under such circumstances that it would be inequitable for defendant to retain the benefit without payment of value.” Sovereign Bank,
Critical to assessing a claim in restitution, therefore, is identifying the alleged reason why the benefit in question was obtained without adequate legal ground. Here, Plaintiff alleges that “[by deliberately breaching their contract with Plaintiff] the Coke Defendants have been knowingly enriched by the savings in costs that should have been reasonably expended to protect the PII of the Plaintiff and the Class.” Compl. ¶ 126. That claims sounds in the “opportunistic breach” theory of restitution, which supports a claim for relief when “a deliberate breach of contract results in profit to the defaulting promisor and the available damage remedy affords inadequate protection to the promisee’s contractual entitlement,” measured by the profit realized by the defaulting promisor. In re 400 Walnut Associates, L.P.,
At this procedural stage, the Court need not precisely sketch the boundaries of this claim but takes this opportunity to observe that the circumstances affording relief under this theory are narrow. See Restatement (Third) of Restitution and Unjust Enrichment § 39 cmt. a (“The restitution claim described in this section is infrequently available, because a breach of contract that satisfies the cumulative tests of § 39 is rare.”). Integral to the claim is that the breach must be deliberate. See id. § 39(1); see
Finally, and vitally, the contractual damage remedy must “afford inadequate protection to the promisee’s contractual entitlement,” for the essence of the claim is the need to “reinforee[ ] .. .an entitlement that would be inadequately protected if liability for interference were limited to provable damages.” See id. § 39(2) & cmt. b. Understood by its purpose, this claim embraces those circumstances where “the promisee’s contractual position is vulnerable to abuse” in order to prevent an inadequate damage remedy from “under-minting] the stability of any contractual exchange in which one party’s performance may neither be easily compelled nor easily valued.” See id. § 39 cmt. b.
These requirements serve to distinguish this claim from those circumstances where it is improper to assert a claim in restitution in a contractual setting. Contracting parties sometimes seek to wield a claim in restitution to disgorge a benefit from a counterparty when a contractual benefit, usually unforeseen by the contracting party at the time the bargain was struck, accrues to the counterparty during the course of performance. Such was the case in Wilson Area School District v. Skepton, where a school district, which had invited bids for the construction of a new school, sought to disgorge from the contractor certain cost savings 'the contractor was able to secure during the course of construction. See
By contrast, Plaintiff is not attempting to use the vehicle of restitution to rewrite the terms of an agreement the parties allegedly made. Rather, the claim that another engaged in an opportunistic breach of a contract is “the equivalent, in the contractual context, of an intentional and profitable tort,” and “it is properly understood and delimited” by analogy to claims in restitution that arise when one engages in an “intentional and profitable interference with another person’s legally protected interests.” See Restatement (Third) of Restitution arid Unjust Enrichment § 39 cmts. a & b. Plaintiff has stated a claim in restitution, and Defendants’ motion to dismiss this claim at this juncture is denied.
Plaintiff asserts a claim under the law of bailments, arguing that the Coke Defendants were bailors of his PII and failed to return it to him. Compl. ¶¶ 130-33. The Court does not agree. Under Pennsylvania law “a cause of action for breach of a bailment agreement arises if the bailor can establish that personalty has been delivered to the bailee, a demand for return of the bailed goods has been made, and the bailee has failed to return the personalty.” Price v. Brown,
While courts in Pennsylvania have yet to consider whether such a claim could arise in connection with a loss of electronic information, a number of courts have found that PII lost by a party holding that information was not “property” or “personalty” for the purposes of the law of bailment. See, e.g., Ruiz v. Gap, Inc.,
I. Plaintiff has failed to state a claim based on a civil conspiracy.
Finally, Plaintiff brings a claim of civil conspiracy, alleging that the Coke Defendants conspired to keep the loss' of PII hidden from Plaintiff. Compl. ¶¶ 134-38. Plaintiff’s conspiracy claim is deficient in two respects!
- First, Plaintiff’s conspiracy claim is founded on his claim of fraud. See Compl. ¶ 135. Because Plaintiff failed to state a claim for fraud, his conspiracy claim must also fail. McKeeman v. Corestates Bank, N.A.,
Second, Plaintiff fails to plausibly allege that the sole purpose of the alleged conspiracy was to maliciously harm him. To state a claim of conspiracy, Plaintiff must allege “(1) a combination of two or more persons acting with a common purpose to do an unlawful act or to do a lawful act by unlawful means or for an unlawful purpose; (2) an overt act done in pursuance of the common purpose; and (3) actual legal damage.” Estate of Werner v. Werner,
Here, Plaintiff alleges that “[t]he Coke Defendants performed the acts alleged [in Plaintiffs Complaint] in furtherance of the common plan or design for the conspiracy with knowledge of the injury and damage it would, cause to Plaintiff [ ] and with intent to cause such injuries or with reckless disregard for the consequences.” Compl. ¶ 137. That the Coke Defendant’s acted “with knowledge of the injury.. .and with intent to cause such injuries or with reckless disregard” is insufficient to state a conspiracy claim which arises only when the “sole purpose” of the conduct was the intent to harm. See Morilus,
V. Conclusion
The questions before the Court are whether Plaintiff has sufficiently pled injury-in-fact fairly traceable to the conduct of the Coke Defendants to have standing under Article III and whether Plaintiff has pled sufficient facts to make his claims for relief plausible. This Court finds that Plaintiff has standing to proceed with his claims consistent with the requirements of Article III. The • Court denies the Coke Defendants Motion to Dismiss Plaintiffs express contract, implied contract, and unjust enrichment claims, but grants the Coke Defendants’ Motion to Dismiss Plaintiffs other claims in accordance with this Memorandum Opinion.
. Coca-Cola Refreshments.
. Plaintiff does allege that one or more of the Colee Defendants controlled his PII during this time period. Compl. ¶ 44
. Defendant argues that loss of credit is not actual injury, citing Johnson v. Four States Enterprises., Inc.,
. “[A] document integral to or explicitly relied on in the complaint may be considered without converting the ’ motion [to dismiss] into one for summary judgment.” In re Burlington Coat Factory Sec. Litig.,
. The Court acknowledges the Coke Defendants’ argument, with regard to the liability of Coca-Cola Co., that a parent company "is not normally liable for the wrongful acts or contractual obligations of a subsidiary even if or simply because the parent wholly owns the subsidiary.” Jean Anderson Hierarchy of Agents v. Allstate Life Ins. Co.,
. Plaintiff cites In re Target, wherein a special relationship was found between a company holding customers PII and the customers who trusted their PII would be secure, to support his own claim of special relationship.
. The Court therefore need not resolve at this time whether Plaintiff, if he prevails on his breach of contract claim, may be entitled to damages-for the “time” and "effort” he allegedly expended. See Compl. ¶ 64.
. Section 39 of the Restatement has attracted some criticism from the highest levels of the judiciary as a principle that "lacks support in the law” Kansas v. Nebraska, — U.S. — , 1*
But the mere fact that the "rule” of section 39 is-new, see Caprice L. Roberts, Restitutionary Disgorgement for Opportunistic Breach of Contract and Mitigation of Damages, 42 Loy. L.A. L. Rev. 131, 140 (2008), does not mean that the Restatement has crafted a new rule of law from whole cloth. A recurring, theme in the law of restitution is the failure of courts to articulate with any consistency the "rule” or principle that they are applying and the corresponding failure to appreciate that the result they reach is restitutionary in nature, See Andrew Kull, Zero-Based Morality, Bus. L. Today, July-Aug. 1992, at 11, 13 ("Most lawyers, and many judges, fail to recognize restitution issues when they come across them. As a result, these issues tend to be addressed by circumlocution and second-best analogies if they are addressed at all.”). That the courts have failed to speak in consistent terms or articulate consistent reasoning to reach a particular result does not mean that the result itself is new and without support from existing case law. See Roberts, supra, at 143 ("A gain-based remedy for ‘a breach of contract case is not unprecedented....American law simply lacks an overarching theory to explain the phenomenon. The Restatement proposes section 39 to fill this void.").
If the intent of the original restatements was "to present an orderly statement of the general common law,” see Kansas,
