You are viewing a free summary from Descrybe.ai. For citation checking, legal issue analysis, and other advanced tools, explore our Legal Research Toolkit — not free, but close.

In re Yahoo! Inc. Customer Data Sec. Breach Litig.

Citation: 313 F. Supp. 3d 1113Docket: Case No. 16–MD–02752–LHK

Court: District Court, N.D. California; March 8, 2018; Federal District Court

Narrative Opinion Summary

In a putative class action against Yahoo! Inc. and Aabaco Small Business, LLC, Plaintiffs allege negligent data security practices led to multiple data breaches compromising user accounts. Plaintiffs assert violations of California statutes, including the Unfair Competition Law (UCL) and the California Consumer Records Act (CRA), alongside common-law claims such as negligence and deceit by concealment. Yahoo's motion to dismiss was partially granted and denied; claims related to the 2013 breach were dismissed due to insufficient allegations, while negligence and deceit claims were allowed to proceed under the J'aire special relationship exception. The court found Yahoo's liability limitations unconscionable, supporting contractual claims. Standing was granted for some Plaintiffs to pursue UCL claims, while others were dismissed. Plaintiffs' claims for punitive damages were upheld, supported by allegations of Yahoo executives' knowledge of security vulnerabilities. The court permitted declaratory relief claims to continue, distinguishing them from contract-based claims. Overall, the litigation centers on Yahoo's alleged failure to implement adequate security measures and disclosure practices, impacting millions of users' personal information.

Legal Issues Addressed

California Consumer Records Act (CRA) Claims

Application: Plaintiffs' claims under § 1798.81.5 and § 1798.82 were dismissed for lack of standing and insufficient allegations regarding the discovery of breaches.

Reasoning: The Court dismissed the California Plaintiffs' claims under the California Consumer Privacy Act (CRA) concerning the 2013 Breach with prejudice due to unaddressed deficiencies.

Deceit by Concealment

Application: Plaintiffs must show reliance on concealed facts, which they adequately alleged against Yahoo.

Reasoning: Plaintiffs assert that the adequacy of Defendants' security measures influenced their decision to use the services, and they would have taken protective measures had they been informed of the security issues.

Economic Loss Rule and Special Relationship Exception

Application: Recovery for economic losses is barred unless a special relationship exists, allowing Plaintiffs' negligence claims to proceed.

Reasoning: The J'aire exception allows for liability if a 'special relationship' exists, evaluated using six factors: (1) the intention of the transaction to affect the plaintiff, (2) foreseeability of harm to the plaintiff, (3) certainty of injury, (4) the connection between the defendant's conduct and the injury, (5) moral blame attached to the defendant's conduct, and (6) policy considerations for preventing future harm.

Motion to Dismiss under Rule 12(b)(6)

Application: The court evaluates whether the Plaintiffs' claims provide sufficient factual allegations for plausible claims, considering judicial notice of certain documents as requested by Defendants.

Reasoning: The legal standard for a motion to dismiss under Rule 12(b)(6) requires that a complaint must present enough facts to state a claim that is plausible on its face, allowing reasonable inferences of liability.

Punitive Damages

Application: The court found allegations sufficient to pursue punitive damages on certain claims, rejecting Defendants' motion to dismiss these allegations.

Reasoning: Plaintiffs have provided specific names and titles of individuals involved, strengthening their claims.

Unconscionability of Liability Limitations

Application: Plaintiffs argued successfully that liability limitations in Yahoo's Terms of Service were procedurally and substantively unconscionable, allowing contract claims to proceed.

Reasoning: Plaintiffs argue that the liability limitations are buried near the end of a 12-page adhesion contract that customers could not negotiate, which supports their claim of procedural unconscionability.

Unfair Competition Law (UCL) Standing

Application: Plaintiffs must demonstrate economic loss due to unfair competition; however, claims by certain Plaintiffs were dismissed due to insufficient standing.

Reasoning: To establish standing under the UCL, Plaintiffs must demonstrate they suffered economic loss due to unfair competition, as defined by California Business and Professions Code § 17204.