ORDER ON DEFENDANT’S MOTIONS TO DISMISS
THIS CAUSE is before the court upon the defendant America OnLine, Inc’s (“AOL”) motions to dismiss (DE # 95. 97). There are two classifications of plaintiffs in this case: the individual consumers (“consumers”) and the Internet Service Providers (“ISPs”). Each of these plaintiff groups has filed a complaint against AOL, and these cases have been consolidated under the above-captioned case number. 1 The court has federal question and supplemental jurisdiction over both cases pursuant to 28 U.S.C. §§ 1331 and 1367. AOL has filed motions to dismiss both of the plaintiffs’ complaints pursuant to Federal Rule of Civil Procedure 12(b)(6). On March 3, 2001, the court heard oral argument on the motions to dismiss. Upon consideration of the pleadings and the arguments of counsel, AOL’s motions to dismiss the consumers’ (DE # 95) and Galaxy’s complaints (DE # 97) are granted in part and denied in part.
Factual Background
1. Nature of Case
This case involves claims by individuals and corporations who allegedly were injured by AOL’s Internet and online access software version 5.0 (“AOL 5.0”). The consumers have brought a class action on behalf of similarly situated consumers who installed AOL 5.0 into their personal computers.
2
Their complaint is a consolidation
Galaxy Internet Services, Inc. (“Galaxy”), the representative ISP, has brought a class action on behalf of similarly situated ISPs that have subscribers who have downloaded or installed AOL 5.0. 3 Galaxy’s complaint contains four counts count I, attempted monopolization of the Internet service market in violation of 15 U.S.C. § 2; count III, violation of the Computer Fraud and Abuse Act, 18 U.S.C. § 1030; count V, unfair or deceptive business practices, brought primarily under M.G.L. c. 93A § 11 and comparable statutes of other states; and count VI, tortious interference with existing and prospective contractual relationships. 4 This complaint was originally filed in the United States District Court for the District of Massachusetts, but it was transferred to the Southern District of Florida and consolidated with the consumers’ complaint.
II. Factual Allegations
A. The Consumers’ Complaint 5
AOL is an ISP that establishes Internet connections through a dial-up Internet account provided by the corporation. By June 30, 1999, AOL had become the world’s largest ISP to residential homes, providing 34,311,550 residential online subscribers with its services. Cons.Compl. at ¶¶ 33, 35. While the six largest ISP operators account for 78.9% of online subscribers, AOL alone accounts for 52% Cons. Compl. at ¶ 35.
According to the consumers, AOL’s intent for the past six years has been to monopolize the market for online services to American households. Cons.Compl. at ¶ 39. One way AOL has attempted to meet this goal is by providing a free disc of its program to every household with a computer, accompanied by a “free trial subscription.” Cons.Compl. at ¶40. Another marketing technique has been to negotiate with computer manufacturers so that a consumer receives AOL when it purchases a new computer system. Cons. Compl. at ¶ 40. A purchaser of such a system need only click on the AOL icon of its computer to install and configure AOL’s Internet access software. Cons. Compl. at ¶ 40. The consumers claim that AOL carefully calculated that, once AOL’s Internet access programs had been installed into residential computers, consumers would be unlikely to change ISPs. Cons.
On October 6, 1999, AOL announced the release of its fifth generation of Internet access software. AOL 5.0. Cons.Compl. at ¶ 49. In a massive marketing campaign, AOL distributed millions of copies of its software and made AOL 5.0 available online. Cons.Compl. at ¶ 50. AOL told consumers that AOL 5.0 was “risk free,” “cost [ ] nothing,” and “provided superior benefits.” Cons.Compl. at ¶¶ 2.50-59. The consumers claim that AOL knew these representations were false because AOL chose to distribute its 5.0 version disks to consumers despite its knowledge that the program included substantial bugs. Cons. Compl. at ¶¶ 60, 61, 81, 82.
According to the complaint by installing AOL 5.0 into their computers, consumers unknowingly have exposed and continue to expose their computer systems and software to a defectively designed and/or unreasonably dangerous software installation process that “changes” the host system’s communications configuration and settings so as to interfere with any non-AOL communications and software services. Cons. Compl. at ¶ 62. AOL 5.0 allegedly causes three kinds of damage to computers. First, AOL 5.0 cuts off non-AOL Internet access. That is, after installing AOL 5.0, many consumers report that they no longer can connect to other ISPs they are using or might want to use in the future. Cons.Compl. at ¶¶ 58-74. Second, AOL 5.0 disrupts consumers’ local area network. Third, the program causes instability in consumers’ computer systems and applications and; as a result causes computer systems to crash. Despite all of these problems, AOL has failed to remedy consumers’ complaints or to fix its software. Cons.Compl. at ¶ 91.
B. Galaxy’s Complaint 6
Like AOL, Galaxy is an ISP that charges a fee for the service of providing Internet access. As ISPs, Galaxy and AOL typically offer other services besides dial-up to the Internet, such as e-mail, web hosting, domain name service, and proprietary online service. Computer users may utilize the services of more than one ISP at any given time. Gal. Compl. at ¶¶ 6-8. Galaxy claims that approximately eight percent of AOL’s 22 million subscribers also subscribe to other ISPs. Gal. Compl. at ¶ 8.
The allegations contained in Galaxy’s complaint aré similar to those made by the consumers. Galaxy also claims that AOL embarked upon a massive marketing campaign to promote its 5.0 program Gal. Compl. at ¶ 12. Although AOL represented to the public that AOL 5.0 was a superi- or program, Galaxy states that AOL knew these representations were false and that it knowingly distributed its program so as to interfere with any non-AOL communications software and services used by consumers. Gal. Compl. at ¶¶ 13, 14. AOL 5.0 caused changes to the settings and configurations of consumers’ computers regardless of whether consumers responded “no” when asked during the installation process of AOL 5.0 if they wanted to make AOL their “default provider.” Gal. Compl. at ¶ 14.
Standard for Motion to Dismiss
To warrant dismissal of a complaint under Rule 12(b)(6) of the Federal Rules of Civil procedure, it must be “clear that no relief could be granted under any set of facts that could be proved consistent with the allegations.”
Blackston v. Alabama,
Analysis
I. AOL’s Motion to Dismiss the Consumers’ Complaint
In support of its motion to dismiss the complaint filed by the consumers, AOL makes two primary arguments. First, it states that by installing AOL 5.0 and agreeing to the terms of the Terms of Service Agreement, the consumers’ exclusive remedy became the replacement of defective AOL software. AOL’s second argument is that the Computer Fraud and Abuse Act, 18 U.S.C. § 1830, does not apply to this case because AOL’s access to consumers’ computers was not unauthorized and the damage allegedly caused by AOL 5.0 does not meet the minimum statutory amount. Each of these arguments is addressed in more detail below.
A. Exclusive Remedy Provision
AOL’s first argument in support of their motion to dismiss the consumers’ complaint is that, by downloading AOL 5.0, the consumers agreed that their only remedy in the event of defective software would be the replacement of the program. AOL contends that in order to install AOL 5.0, the consumers had to consent to the terms of AOL’s Terms of Service (“TOS”) Agreement by clicking' a box marked “I AGREE.” The relevant provision under the TOS Agreement states. “[M]ember expressly agrees that the use of AOL, AOL software, and the Internet is at member’s sole risk.” Def.’s Mtn., Ex. A. With
AOL’s argument is premature as a basis for a motion to dismiss. Contractual limitation of remedies is an affirmative defense, and it is not a ground upon which the consumers’ complaint can be dismissed.
See Tamiami Partners, Ltd. v. Miccosukee Tribe of Indians of Fla.,
AOL’s allegations that the consumers waived their claims for damages by entering into the TOS Agreement are not supported by the consumers’ complaint because the consumers have raised no claims that are based on the TOS Agreement. Their causes of action are based on a federal statute, state statutes, and common law theories of recovery. Even if the complaint contained allegations regarding this issue, it is inappropriate for the court to rule on it at this time as a matter of law because the factual record on this issue has not been developed, and there appear to be disputed issues of fact regarding the TOS Agreement. The parties dispute the circumstances surrounding the execution of the TOS Agreement, whether the damage to the computers was done before or after the TOS Agreement was executed, and whether AOL knew its 5.0 program was defective prior to attempting to limit the consumers’ remedies. Because the issue of the consumers’ waiver of remedies is more appropriately determined pursuant to a motion for summary judgment, AOL’s motion on this point is denied.
While the court concludes that AOL’s waiver of remedies argument is premature, it also recognizes that it may be dispositive of this case. As a result, whether the TOS agreement contained a valid exclusive remedy provision is an issue that must be addressed as soon as possible. During oral argument both AOL and the consumers agreed that proper resolution of this issue would require limited merits discovery, but the court’s omnibus order of December 4, 2000, which set pretrial procedures, provides that merits discovery shall not begin until September of 2001. This reflects the tension between the court’s twin goals of promptly resolving the waiver issue and avoiding the costs that may be incurred by unnecessary discovery.
Following oral argument, during which the court informed the parties that it
1. Within ten days of the entry of this order, AOL and the consumers shall each submit a discovery plan to the court.
2. On Wednesday, May 9, 2001, at 10:00 a.m., the parties shall meet with Magistrate Judge Robert L. Dube to craft a discovery plan that is limited to the waiver issue. Limited discovery on this matter will commence immediately upon the approval of the discovery plan by Magistrate Judge Dube.
3. The discovery and briefing schedule on the waiver issue shall run concurrently with class discovery and certification.
4. By July 17, 2001, AOL shall file a motion for summary judgment on the waiver issue only. By August 17, 2001, the consumers shall file a response to the motion, and AOL, shall file its reply by September 7, 2001.
5. The court will hold oral argument on this motion for summary judgment, along with the motion for class certi- • fication, on November 2, 2001.
B. The Computer Fraud and Abuse Act
AOL’s second argument seeks to dismiss the consumers’ federal claim, which is under the Computer Fraud and Abuse Act (“CFAA”), 18 U.S.C. § 1030. Specifically, the consumers have brought suit under 18 U.S.C. § 1030(a)(5), which states:
(a) Whoever-
(5)(A) knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;
(B) intentionally accesses a protected computer without authorization, and as a result of such conduct, recklessly causes damage; or
(C) intentionally accesses a protected computer without authorization, and, as a result of such conduct, causes damage;
shall be punished as provided in subsection (c) of this section.
Although this statute is designed primarily to punish criminal violations, it recognizes private causes of action for individuals damaged by computer fraud: “Any person who suffers damage or loss by reason of a violation of this section may maintain a civil action against the violator to obtain compensatory damages and injunctive relief or other equitable relief.” 18 U.S.C. § 1030(g). AOL seeks to dismiss the consumers’ claim by arguing that the CFAA does not apply to the facts of this case.
1. Authorization
As an initial matter, AOL argues that the CFAA claim fails because AOL’s access to the consumers’ computers was not “without authorization,” as required by 18 U.S.C. § 1030. According to AOL, the consumers expressly authorized the installation of AOL 5.0 on their computers. AOL contends that, at most, it exceeded the scope of its authority by distributing defective software, but exceeding the scope of authorization is not a situation that is covered by 18 U.S.C. § 1030(a)(5), the only
a. AOL’s Position
In support of its argument. AOL states that other provisions under the CFAA specifically provide for access “without authorization” and access that “exceeds” authorization. These provisions are: § 1030(a)(1), which states, “having knowingly accessed a computer without authorization or exceeding authorized access... § 1030(a)(2), which states, “intentionally accesses a computer without authorization or exceeds authorized access... ”; and § 1030(a)(4), which states, “knowingly and with intent to defraud, accesses a protected computer without authorization, or exceeds authorized access...” In contrast, § 1030(a)(5), the provision under which the consumers have brought suit, only states, “causes damage without authorization... ”. AOL argues that, if Congress had intended to include instances where a defendant exceeds authorized access in § 1030(a)(5), it would have included the “exceeding authorized access” language in the provision, as it did in other sections of the CFAA. The consumers counter that the term “authorize”, as used in the CFAA, must be read broadly enough so as to encompass AOL’s actions.
b. Principles of Statutory Construction
Determining whether §§ 1030(a)(5)(A)-(C) provide a basis for the consumers’ CFAA claim requires an interpretation of the phrases “authorize” and “exceeds authorization” and the significance of the latter phrase’s absence from the subsections in question. Canons of statutory construction must guide this interpretation. As stated by the Eleventh Circuit, the starting point for all statutory interpretation is the language of the statute itself.
See Harris v. Garner,
c.The Statutory Language Is Clear
Subsection 1030(e)(6) of Title 18 defines the term “exceeds authorized access” to mean “to access a computer with authorization and to use such access to obtain or alter information in the computer that the accessor is not entitled to obtain or alter.” By including this term within the definitional section of the CFAA, Congress has indicated that the term has a specific meaning within the statutory scheme. Furthermore, Congress excluded the term “exceeds authorized access” from the provisions under which the consumers bring
d. Do §§ 1030(a)(5)(A)-(C) Support the Consumers’ Claims?
If the factual scenarios that are included by the phrase “exceeds authorized access” are excluded from §§ 1030(a)(5)(A)-(C), the next question that arises is what circumstances are covered by the provisions at issue.
§§ 1030(a)(5)(B)-(C): As written, the term “without authorization” in §§ 1030(a)(5)(B) and (C) directly modifies “accesses.” These provisions clearly contemplate a situation where an outsider, or someone without authorization, accesses a computer. Although the statutory language is not ambiguous, the court can look to the CFAA’s legislative history to reinforce this conclusion. In discussing the current version of the CFAA, the Senate Report provides:
Subsection 1030(a)(5)(B) would penalize, with a fíne and up to 5 years’ imprisonment, anyone who intentionally accesses a protected computer without authorization and, as a result of that trespass, recklessly causes damage. This would cover outsiders hackers into a computer who recklessly cause damage. Finally, subsection 1030(a)(5)(C) would impose a misdemeanor penalty, of a fine and up to 1 year imprisonment, for intentionally accessing a protected computer without authorization and, as a result of that trespass, causing damage. This would cover outside hackers into a computer who negligently or accidentally cause damage.... [OJutside hackers who break into a computer could be punished for any intentional, reckless, or other damage they cause by their trespass.
S. Rep. 104-357, at 11. Aug. 27, 1996 (emphasis added). This reinforces the conclusion that §§ 1030(a)(5)(B) and (C) are intended to apply to outsiders who access a computer. This situation does not exist here, where AOL acted as an insider when it was allowed to access the consumers’ computers when the consumers downloaded the 5.0 program.
8
Accordingly, the
§ 1030(a)(5)(A): Unlike §§ 1030(a)(5)(B) and (C), in which “accesses” is modified by “without authorization”, “without authorization” is used in § 1030(a)(5)(A) to modify “causes damage.” This difference indicates that Congress did not intend § 1030(a)(5)(A) to apply only to outsiders who lack authorization. Again, the legislative history reinforces this conclusion,
Specifically, as amended, subsection 1030(a)(5)(A) would penalize, with a fine and up to 5 years’ imprisonment, anyone who knowingly causes the transmission of a program, information, code or command and intentionally causes damage to a protected computer. This would cover anyone who intentionally damages a computer, regardless of whether they were an outsider or an insider otherwise authorized to access the computer .... In sum, under [subsection 1030(a)(5)(A) ], insiders, who are authorized to access a computer, face criminal liability only if they intend to cause damage to the computer, not for recklessly or negligently causing damage.
S. Rep. 104-357, at 11, Aug. 27, 1996 (emphasis added).
The allegations of the consumers’ complaint do not fail to state a claim under § 1030(a)(5)(A) simply because “exceeds authorized access” is not included within the provision. A plain reading of the provision and its legislative history demonstrates that § 1030(a)(5)(A) applies to the facts of this case. As an insider, or a person authorized to access the consumers’ computer via the installation process of AOL 5.0, AOL allegedly has transmitted damaging information through its 5.0 program. Other courts have upheld plaintiffs’ claims under similar facts.
See, e.g., Shaw v. Toshiba Am. Info. Sys., Inc.,
AOL also contends that its actions are outside the scope of 18 U.S.C. § 1030(a)(5) because the consumers cannot establish the requisite amount of statutory damages. According to AOL, the provisions under which the consumers have brought suit are limited to cases where damage causes at least $5,000 in losses to “a protected computer,” not an aggregate of computers. Again, AOL relies, not on case law, but a narrow interpretation of 18 U.S.C. § 1030(a)(5), which provides:
(a) Whoever-
(5)(A) knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;
(B) intentionally accesses a protected computer without authorization, and as a result of such conduct, recklessly causes damage; or
(C) intentionally accesses a protected computer without authorization, and, as a result of such conduct, causes damage;
shall be punished as provided in subsection (c) of this section.
18 U.S.C. § 1030(a)(5) (emphasis added).
The consumers, on the other hand, rely on 18 U.S.C. § 1030(e)(8), the definition section of the CFAA, which explicitly provides for aggregation and defines “damage” as “any impairment to the integrity or availability of data, a program, a system, or information that-(A) causes loss aggregating at least $5,000 in value during any 1-year period to one or more individuals.” (emphasis added).
The parties’ dispute whether the $5,000 in damage must be to a single computer or whether the $5,000 can be established as a sum of the injuries to various individuals. The phrasing of § 1030(a)(5), particularly subsection (A), is susceptible to either AOL’s or the consumers’ interpretation of the statute.
9
The source of confusion is the dangling participle “to a protected computer,” which appears in § 1030(a)(5)(A).
See Young v. Community Nutrition Inst.,
AOL does not take into account the uncertainty that arises from Congress’ placement of the phrase “to a protected computer” within § 1030(a)(5). As a result, its argument proceeds from the premise that the statutory language is unambiguous. AOL cites to two cases in support of its argument that Congress’ intent as to the damages threshold is clear. In
Thurmond v. Compaq Comp. Corp.,
No. 1:99—CV-0711 (TH/WR) (E.D.Tex. Mar. 15, 2001), a Texas district court held that the $5,000 aggregated loss must be to no more than one computer. A district court in New York arrived at the same result in
In re Doubleclick, Inc., Privacy Litig.,
The cases cited by AOL are unpersuasive for several reasons. It is important to note that neither
Thurmond
nor
Double-click
are binding precedent within this Circuit. Moreover, their precedent did not allow them to aggregate damages until the classes had been certified. In the Eleventh Circuit, the rule is opposite, for a case is treated as a class action until certification is denied.
See Smith v. GTE Corp.,
The legislative history of the CFAA actually contravenes AOL’s argument that Congress intended for damage to be measured by only one computer. In fact, the predecessor versions of the CFAA make it clear that damage is to be measured as it stems from one act, not a single computer, and thereby affects several individuals. The Senate Report to the 1986 amendments provides:
The Committee does not intend that every victim of acts proscribed under (a)(5) must individually suffer a loss of $1,000. 10 Certain types of malicious mischief may cause smaller amounts of damage to numerous individuals, and thereby collectively create a loss of more than $1,000. By using “one or more others,” the Committee intends to makeclear that losses caused by the same act may be aggregated for purposes of meeting the $1,000 threshold.
S. Rep. No. 99-474, 99th Cong. 2nd Sess., U.S.Code Cong. & Admin.News 1986, at p. 2488, Oct. 6, 1986. Furthermore, the CFAA has been increasingly broadened by Congress. Consumers who use computers for residential purposes are among those the CFAA seeks to protect. A Senate Report states, “As computers continue to proliferate in businesses and homes, and new forms of computer crimes emerge, Congress must remain vigilant to ensure that the Computer Fraud and Abuse statute is up-to-date and provides law enforcement with the necessary framework to fight computer crime.” S. Report, 104-357, at 5 (1996) (emphasis added). If the court were to interpret 18 U.S.C. § 1030 as requiring each home user to sustain more than $5,000 in damages, the home user never would be protected because $5,000 is far more than the average price of a home computer system.
Congress’ intent to aggregate losses stemming from a single act eventually was codified in the definitions section of the CFAA.
See
18 U.S.C. § 1030(c)(8)(A) (defining “damage” as “any impairment to the integrity or availability of data, a program, a system, or information that ... causes loss aggregating at least $5,000 in value during any 1-year period to one or more individuals”). That the CFAA specifically defines damage in terms of aggregation lends further support to the consumers’ position that their injuries can be aggregated to meet the $5,000” threshold.
See Florida Dept. of Banking and Fin. v. Board of Gov. of the Fed. Reserve Sys.,
AOL’s interpretation of the dangling participle, “to a protected computer,” would lead to the absurd result that a party who accesses one computer without authorization, and thereby causes $5,000 worth of damage to that one computer, would be guilty of violating the CFAA and, therefore, civilly liable. On the other band, a party who accesses millions of computers and causes only $100 worth of damage to each computer would not be guilty of violating the CFAA. The latter situation was avoided by the court in
Shaw v. Toshiba America Information Systems, Inc.,
Notwithstanding the rejection of AOL’s position, the court notes that the consumers’ complaint fails to sufficiently allege that individuals have suffered aggregate harm in the amount of $5,000. The consumers have stated, “Such impairment has and will cause loss aggregating to at least $5,000 in value in any one year period to one or more individuals.” Cons.Compl. at ¶ 102. This allegation is insufficient
11. AOL’s Motion to Dismiss Galaxy’s Complaint
AOL has filed a motion to dismiss all six counts of Galaxy’s complaint. In response to this motion. Galaxy voluntarily dismissed counts II and IV and narrowed the scope of count III. Galaxy, however, contests AOL’s arguments as to counts I, III, V, VI, and VII.
A. Attempted Monopolization
Count I of Galaxy’s complaint is for attempted monopolization in violation of the Sherman Act, 15 U.S.C. § 2.
12
In order to establish the offense of attempted monopolization, a plaintiff must show that: (1) the defendant possessed the specific intent to achieve monopoly power by predatory or exclusionary conduct; (2) the defendant in fact committed such anticom-petitive conduct; and (3) there existed a dangerous probability that the defendant might have succeeded in its attempt to achieve monopoly power.
See U.S. Anchor Mfg., Inc. v. Rule Indus., Inc.,
1. Relevant Market
Although “the definition of the relevant market is essentially a factual question,”
Aventura Cable Corp. v. Rifkin/Narragansett South Florida CATV,
2. Dangerous Probability of Actual Monopolization
Even if Galaxy had defined the relevant market adequately, dismissal of its complaint still would be proper because Galaxy has failed to allege that there exists a dangerous probability of actual monopolization by AOL. It is not enough, as Galaxy contends, for a court to infer that there exists a dangerous probability of actual monopolization. This element must be alleged specifically in a plaintiffs complaint.
See Aquatherm Indus., Inc.,
B. Consumer Fraud and Abuse Act
Like the consumers, Galaxy has brought a claim under the CFAA, 18 U.S.C. § 1030. In its complaint, Galaxy asserted claims under 18 U.S.C. §§ 1030(a)(4) and 1030(a), (5)(A)-(C), but, in response to AOL’s motion to dismiss, Galaxy has dismissed its claims under § 1030(a)(5)(A)-(B). Only the claims under §§ 1030(a)(4)
1. Standing
As an initial matter, AOL contends that Galaxy lacks standing to sue under the CFAA. According to AOL, Galaxy has asserted only damage to its subscribers’ computers, and, because any resulting injury to Galaxy is indirect at best, Galaxy falls outside the scope of the CFAA. In response, Galaxy argues that its damages are distinct from those of its subscribers. While the consumers have alleged damage to their computers, Galaxy claims that its damages are based on AOL’s interference with Galaxy’s relationships with existing and prospective subscribers and the increased time spent by Galaxy technical support personnel in dealing with AOL 5.0 problems. See Gal. Compl. at ¶ 18.
As discussed in subsection I, A. 1 of this order, the CFAA, a primarily criminal statute, provides a private cause of action for “[a]ny person who suffers damage or loss by reason of a violation” of any section of the CFAA. 18 U.S.C. § 1030(g). Only one circuit has faced the issue of whether the CFAA encompasses injuries to business entities, and it has answered this question in the affirmative. In
United States v. Middleton,
Other courts implicitly have recognized that corporations including ISPs, have standing to bring private causes of action under the CFAA.
See, e.g., Register.com, Inc. v. Verio, Inc.,
Of these cases,
Register.com
is the most similar to the one at bar. In
Register.com,
the defendant utilized a search robot to access the plaintiffs database, collected customer names, and bombarded those customers with unsolicited advertisements.
See Register.com,
Interestingly, AOL itself has used the CFAA to assert claims against other corporations or individuals that have interfered with their customers.
See, e.g., America Online, Inc. v. LCGM, Inc.,
downloading 5.0 unnecessarily “changes” the host system’s configuration and settings so as to interfere with any non-AOL communications software and services the customer might be using or might want to use in the future, including the software and services provided by Plaintiff and members of the Class. Thus, after installing AOL 5.0, users were no longer able to connect to other ISPs, including the Plaintiff and the Class, and were no longer able to run non-AOL e-mail programs, including those offered by the Plaintiff and the Class.
Gal. Compl. at ¶ 14. In effect, Galaxy has alleged that AOL 5.0 does not allow Galaxy or other ISPs to continue providing services to their customers. These allegations are similar to AOL’s claims in the above-cited cases that the defendants’ actions affected their ability to provide efficient service to their customers. Moreover, in these cases, AOL was not alleging damage only to its computers. It also claimed that the defendants’ actions “injured AOL by ... causing AOL to incur technical costs, impairing the functioning of AOL’s e-mail system_ damaging AOL’s goodwill with its members, and causing AOL to lose customers and revenue.”
America Online, Inc.,
AOL bases much of its standing argument on causation principles of tort law. It contends that Galaxy’s injuries are outside the “zone of interests” sought to be protected by the CFAA. As already discussed, other courts have implicitly recognized the right of an ISP to sue under the CFAA for injuries of the type involved here. AOL’s causation arguments are particularly inapplicable to this case because, as a criminal statute, the CFAA’s
2. Authorization and Damages
AOL also seeks to dismiss Galaxy’s claim under 18 U.S.C. § 1030(a)(5)(C) on the same grounds it asserted against the consumers’ complaint. That is, AOL argues that it was authorized to access the customers’ computers and that Galaxy cannot meet the requisite amount of statutory damages. For the reasons discussed in subsections I, A, 1 and 2 of this order, AOL’s motion to dismiss on these grounds is granted. 14
3. 18 U.S.C. § 1030(a)(4)
Galaxy also has asserted its CFAA claim pursuant to 18 U.S.C. § 1030(a)(4). Under this provision, anyone who “knowingly and with intent to defraud, accesses a protected computer without authorization or exceeds authorized access, and by means of such conduct furthers the intended fraud and obtains anything of value” can be held liable. 18 U.S.C. § 1030(a)(4) (emphasis added). According to AOL, Galaxy cannot bring a claim under this provision because it has not pled that AOL deprived it of “anything of value.” In response, Galaxy claims that it was deprived of its subscribers’ “custom and trade” and that this interest constitutes a thing “of value.” Gal. Compl at ¶ 37.
The case primarily relied upon by AOL does not support its argument. In
United States v. Czubinski,
Although the typical item of value in CFAA cases is usually data, in other areas of the law, customers have been found to be a thing of value.
See Newark Morning Ledger Co. v. United States,
C. Unfair Methods of Competition
Count V of Galaxy’s complaint is for unfair methods of competition and unfair or deceptive business practices in violation of Massachusetts General Law, chapter 93A § 11. AOL seeks to dismiss this claim by arguing that the statute by its terms, is limited to conduct that “occurred primarily and substantially” in Massachusetts. Section 11 of chapter 93A provides, in part:
No action shall be brought or maintained under this section unless the actions and transactions constituting the alleged unfair method of competition or the unfair or deceptive act or practice occurred primarily and substantially within the commonwealth. For the purposes of this paragraph, the burden of proof shall be upon the person claiming that such transactions and actions did not occur primarily and substantially within the commonwealth.
AOL correctly asserts that to maintain a claim under chapter 93A § 11, a plaintiff must allege that the unfair and deceptive acts occurred “primarily and substantially” in Massachusetts.
See Harbourvest Int’l Private Equity Partners II-Direct Fund, L.P. v. Axent Tech., Inc.,
D. Tortious Interference With Contractual Relationships
Count VI of Galaxy’s complaint is for tortious interference with existing and prospective contractual relationships. According to AOL, this claim should be dismissed because Galaxy has failed to allege essential elements of the torts. For the reasons discussed below, the court agrees with AOL and finds that Count VI should be dismissed without prejudice.
1. Existing Contractual Relationships
In order to state a claim for tortious interference with existing contractual relationships, a plaintiff must allege: (1) it had a contract with a third party; (2) the defendant knowingly induced the third party to break the contract; (3) the defendant had an improper motive or means for doing so; and (4) it was harmed by such actions.
See American Telephone & Telegraph Co. v. IMR Cap. Corp.,
2. Tortious Interference with Prospective Business Relationships
A claim for tortious interference with prospective business relationships requires a plaintiff to plead the following: (1) a business relationship or contemplated contract of economic benefit; (2) the defendant’s knowledge of such a relationship; (3) the defendant’s intentional and improper interference with it; and (4) the plaintiffs loss of advantage directly resulting from the defendant’s conduct.
See American Private Line Svcs., Inc. v. Eastern Microwave, Inc.,
In order to show that it had a business relationship with third parties, Galaxy must have a “probable future business relationship anticipating a reasonable expectancy of financial benefit.”
See American Private Line Svcs.,
It appears that the plaintiffs theory is that the existence of a potential market for a company’s product is sufficient to create a prospective advantageous relationship with each potential customer in that market. Massachusetts does not interpret this tort to reach so far. The plaintiff has not identified any case in which a court applying Massachusetts law has allowed a claim for intentional interference with advantageous business relations where the business relationship said to have been interfered with was as inchoate as alleged here. General inquiries in response to a mass mailing do not create a “prospective business relationship” sufficient to satisfy the first element of this tort.
Laser Labs, at 23-24. Although the court in Laser Labs was reviewing a motion for summary judgment its reasoning is applicable here. Massachusetts requires that the plaintiff show more than the possibility that it had potential customers in the market, but Galaxy has alleged nothing more than this. As such, AOL’s motion to dismiss count VI is granted on this issue as well.
Accordingly, it is
ORDERED AND ADJUDGED that:
1. AOL’s motion to dismiss the consumers’ complaint (DE # 95) is GRANTED IN PART and DENIED IN PART; that is, the consumers’ claims under 18 U.S.C. §§ 1030(a)(5)(B)-(C) are dismissed with prejudice, and the claim under 18 U.S.C. § 1030(a)(5)(A) is dismissed without prejudice. The consumers are granted leave to amend their complaint to address the issues specified in subsection I. B of this order. The consumers have ten days from the date of this order to file an amended complaint.
2. AOL’s motion to dismiss Galaxy’s complaint (DE # 97) is GRANTED IN PART and DENIED IN PART: that is, Galaxy’s claim under 18 U.S.C. § 1030(a)(5) is dismissed with prejudice; the claims under 15 U.S.C. § 2, unfair business practices, and tortious interference are dismissed without prejudice; and the claim under 18 U.S.C. § 1030(a)(4) remains. Galaxy has ten days from the date of this order to file an amended complaint.
3. Within ten days from the date of this order, AOL and the consumers shall file their discovery proposals as outlined in subsection I, order. of this
Notes
. On June 2, 2000, with the agreement of AOL, the Judicial Panel on Multi-district Litigation (“the MDL Panel”) transferred pending federal cases to this district for coordination and consolidation of pretrial proceedings. The MDL Panel subsequently transferred more than forty related cases to Florida, and with the exception of Galaxy's case, these cases have been consolidated in the consumers’ complaint.
. The named representatives of the consumer class are: Flo Kelly, a Florida resident; Merk
. Galaxy seeks class certification, but no motion to certify has yet been filed.
. In its response to AOL’s motion to dismiss, Galaxy withdrew counts II and IV of its complaint, which were for violations of the Clayton Act, 15 U.S.C. § 14, and the Electronic Communications Privacy Act, 18 U.S.C. § 2701, respectively.
. The following facts are derived from the consumers' complaint.
. The following facts are derived from Galaxy's complaint.
. AOL contends that this issue must be decided under Virginia law because the TOS Agreement contained a Virginia choice of law provision. The court declines to address the choice of law issue at this time.
. Borrowing from the common law definition of trespass, the consumers argue that AOL
. At best, AOL's argument can be made only with regards to § 1030(a)(5)(A), which is the only provision from which it can be implied that "damage” must be to "a protected computer.” Subsections 1030(a)(5)(B) and (C) do not state that "damage” must be to "a protected computer.” Instead, they provide that "access” must be to "a protected computer," and they do not qualify the term "damage” with any limitations.
. The current version of the CFAA sets this amount at $5,000.
. As discussed above, statements made by the Attorney General are not a persuasive indication of what Congress intended when it adopted the CFAA.
. This provision states:
Every person who shall monopolize, or attempt to monopolize, or combine or conspire with any other person or persons, to monopolize any part of the trade or commerce among the several States, or with foreign nations, shall be deemed guilty of a felony, and, on conviction thereof, shall be punished by fine not exceeding $10,000,000 if a corporation, or, if any other person, $350,000, or by imprisonment not exceeding three years, or by both said punishments, in the discretion of the court.
15 U.S.C. § 2.
. Although Galaxy does not allege this in its complaint, AOL contends that Galaxy provides dial-up Internet service to customers in Connecticut, Delaware, Georgia, Massachu--setts, Maryland, New Hampshire, New Jersey, New York, Pennsylvania, Rhode Island, Virginia, and Washington, D.C. See AOL Mtn. to Dismiss at 3.
. The only viable CFAA claim asserted by the consumers is under 18 U.S.C. § 1030(a)(5)(A), but Galaxy has withdrawn its claim under this provision.
. Because this court received Galaxy's case from the District of Massachusetts under a transfer order, it must apply the state law that would have been applied had there been no transfer.
See Ferens v. John Deere Co.,
