In a significant development in the data security legal landscape, a federal judge in New York dismissed a proposed class action lawsuit filed against the American Bar Association (ABA). The case was brought forward by two ABA members who had concerns regarding a potential disclosure of their personal information.
The plaintiffs believed that they were at an increased risk of identity theft because of an alleged data breach at ABA; however, Judge Caproni of the Southern District of New York declared that the plaintiffs failed to prove any actual injury, a necessary prerequisite for Article III standing in such cases. The court thereby granted ABA’s motion to dismiss the suit on the grounds of lack of standing.
The complainants had claimed that they had to go through stress, expense, and inconvenience, including the need to monitor their financial accounts, and had even incurred costs obtaining new forms of identification due to the perceived threat. Yet, the judge emphasized that only a “credible threat” of harm amounting to “certainly impending” injury could meet the threshold required to claim damages.
Admittedly, the ABA acknowledged an unauthorized access incident in an email announcement to members, although no specific details were shared as to the extent of the potential breach or type of information accessed. In spite of this apparent lapse, the judge in the case underscored that the plaintiffs did not provide any evidence to establish that the information accessed was their own or that such data was misused.
Caproni’s ruling aligns with a string of recent court decisions that have exhibited increased scrutiny of standing in data breach class action suits. This judgement thus underscores the legal requirement for tangibly demonstrable harm to attain standing, as opposed to speculative risks.
The dismissal of this case is a reminder for plaintiffs to present substantial evidence of actual harm in data breach class action lawsuits. On the other hand, it provides further points of defense for companies facing such litigation.
Read more on this case from the original article on Reuters.