WILLIAM L. BABBITT, No. 2:23-cv-0923-CKD Plaintiff, v. ORDER Defendant.
Plaintiff William L. Babbitt proceeds without counsel with a civil action asserting a violation of the Computer Fraud and Abuse Act, 18 U.S.C. § 1030 (“CFAA”). This matter is before the undersigned for all purposes including trial and entry of judgment pursuant to the parties’ consent and the court’s order of July 20, 2023. (ECF Nos. 10, 12, 13.) A motion to dismiss under Rule 12(b)(6) of the Federal Rules of Civil Procedure by defendants Tangela Babbitt and the County of Sacramento is before the court. (ECF No. 5.) On July 26, 2023, the court held a hearing on defendants’ motion to dismiss via videoconference. Attorney Katie Bonin appeared on behalf of defendants and Mr. Babbitt appeared pro se. For the reasons set forth below, the motion to dismiss is granted and plaintiff’s complaint under the CFAA is dismissed without leave to amend. //// I. Background Plaintiff initiated this action with a civil complaint filed in the Superior Court of California, County of Sacramento. Defendants removed the case to this court on May 17, 2023. (ECF No. 1.) Plaintiff alleges that, “beginning about August 2017,” defendant Babbitt used a Sacramento County fax machine to fax “multiple fraudulent fax transmissions” to the U.S. Department of Veterans Affairs, which resulted in plaintiff’s Veterans Disability pay being temporarily redirected to defendant Babbitt’s “personal green dot [bank] card.” (ECF No. 2 at 2.) At the relevant time, defendant Babbitt was employed by the County of Sacramento and had a restraining order against plaintiff. (Id.) Plaintiff was incarcerated from February 2018 to November 2019. (Id.) Plaintiff alleges the County of Sacramento “Department of Health and Human Services failed to properly monitor and enforce their use of county electronics for personal use policy.” (Id. at 1.) In the motion to dismiss, defendants argue plaintiff’s complaint fails to state an actionable claim for any violation of 18 U.S.C. § 1030. The motion is fully briefed with plaintiff’s opposition and defendants’ reply. (ECF Nos. 8, 11.) II. Legal Standard Dismissal under Rule 12(b)(6) may be warranted for “the lack of a cognizable legal theory or the absence of sufficient facts alleged under a cognizable legal theory.” Balistreri v. Pacifica Police Dep’t, 901 F.2d 696, 699 (9th Cir. 1990). In evaluating whether a complaint states a claim on which relief may be granted, the court accepts as true the allegations in the complaint and construes the allegations in the light most favorable to the plaintiff. Hishon v. King & Spalding, 467 U.S. 69, 73 (1984); Love v. United States, 915 F.2d 1242, 1245 (9th Cir. 1989). “[R]ecitals of the elements of a cause of action, supported by mere conclusory statements, do not suffice” to state a valid claim for relief. Ashcroft v. Iqbal, 556 U.S. 662, 676 (2009). A complaint must do more than allege mere “labels and conclusions” or “a formulaic recitation of the elements of a cause of action.” Bell Atl. Corp. v. Twombly, 550 U.S. 544, 555 (2007). In order to state a valid claim for relief, a plaintiff must allege “enough facts to state a claim to relief that is plausible on its face.” Twombly, 550 U.S. at 570. A claim that is plausible on its face has sufficient factual content to allow a reasonable inference that the defendant is liable for the misconduct alleged. Iqbal, 556 U.S. at 678. This plausibility standard “asks for more than a sheer possibility that a defendant has acted unlawfully.” Id. III. Discussion A. CFAA Background “The CFAA was enacted in 1984 to enhance the government’s ability to prosecute computer crimes [and] was originally designed to target hackers[.]” LVRC Holdings LLC v. Brekka, 581 F.3d 1127, 1130 (9th Cir. 2009) (citing 18 U.S.C. § 1030). “The CFAA prohibits a number of different computer crimes, the majority of which involve accessing computers without authorization or in excess of authorization, and then taking specified forbidden actions, ranging from obtaining information to damaging a computer or computer data.” Id. at 1130. The CFAA is a criminal statute which creates a limited right of action for private persons injured by such crimes. See 18 U.S.C. § 1030(g). A private plaintiff must prove that the defendant violated one of the provisions of § 1030(a)(1)-(7), and that the violation involved at least one of five factors set forth by subclause in the statute. See LVRC Holdings LLC, 581 F.3d at 1131. B. The Parties’ Arguments Defendants argue plaintiff’s allegations concerning use of a fax machine not connected to a Sacramento County computer system cannot plausibly suggest a violation of 18 U.S.C. § 1030, which is premised on computer usage. Defendants note plaintiff’s complaint fails to allege which subsection of 1030(a) was violated, though defendants presume plaintiff intended to allege a violation of 18 U.S.C. § 1030(a)(4). Defendants argue the complaint fails to allege a violation of 18 U.S.C. § 1030(a)(4), in part, because no computer was alleged to be involved. Defendants also argue plaintiff failed to timely bring his claim within the applicable statute of limitations because he discovered the facts underlying the claims when he was released from prison in 2019 and did not bring them within 2 years. Defendants argue a claim under the CFAA does not lie against the County of Sacramento even if plaintiff had adequately alleged a violation of 18 U.S.C. § 1030. //// In opposition to the motion, plaintiff argues defendant Babbitt knowingly extorted money from plaintiff in violation of the CFAA under 18 U.S.C. § 1030(a)(7)1 with the use of a Sacramento County computer and fax machine by successfully changing plaintiff’s direct deposit information. Plaintiff argues defendant’s conduct violated another criminal statute, 18 U.S.C. § 1341, Frauds and Swindles. Plaintiff argues defendant Babbitt violated the Sacramento County Employee Handbook through the misuse of County resources, and that the County is liable because defendant Babbitt used a County computer and County fax machine to commit the alleged acts.2 C. Discussion The CFAA provides, in relevant part: Any person who suffers damage or loss by reason of a violation of this section may maintain a civil action against the violator to obtain compensatory damages and injunctive relief or other equitable relief.
Free access — add to your briefcase to read the full text and ask questions with AI
WILLIAM L. BABBITT, No. 2:23-cv-0923-CKD Plaintiff, v. ORDER Defendant.
Plaintiff William L. Babbitt proceeds without counsel with a civil action asserting a violation of the Computer Fraud and Abuse Act, 18 U.S.C. § 1030 (“CFAA”). This matter is before the undersigned for all purposes including trial and entry of judgment pursuant to the parties’ consent and the court’s order of July 20, 2023. (ECF Nos. 10, 12, 13.) A motion to dismiss under Rule 12(b)(6) of the Federal Rules of Civil Procedure by defendants Tangela Babbitt and the County of Sacramento is before the court. (ECF No. 5.) On July 26, 2023, the court held a hearing on defendants’ motion to dismiss via videoconference. Attorney Katie Bonin appeared on behalf of defendants and Mr. Babbitt appeared pro se. For the reasons set forth below, the motion to dismiss is granted and plaintiff’s complaint under the CFAA is dismissed without leave to amend. //// I. Background Plaintiff initiated this action with a civil complaint filed in the Superior Court of California, County of Sacramento. Defendants removed the case to this court on May 17, 2023. (ECF No. 1.) Plaintiff alleges that, “beginning about August 2017,” defendant Babbitt used a Sacramento County fax machine to fax “multiple fraudulent fax transmissions” to the U.S. Department of Veterans Affairs, which resulted in plaintiff’s Veterans Disability pay being temporarily redirected to defendant Babbitt’s “personal green dot [bank] card.” (ECF No. 2 at 2.) At the relevant time, defendant Babbitt was employed by the County of Sacramento and had a restraining order against plaintiff. (Id.) Plaintiff was incarcerated from February 2018 to November 2019. (Id.) Plaintiff alleges the County of Sacramento “Department of Health and Human Services failed to properly monitor and enforce their use of county electronics for personal use policy.” (Id. at 1.) In the motion to dismiss, defendants argue plaintiff’s complaint fails to state an actionable claim for any violation of 18 U.S.C. § 1030. The motion is fully briefed with plaintiff’s opposition and defendants’ reply. (ECF Nos. 8, 11.) II. Legal Standard Dismissal under Rule 12(b)(6) may be warranted for “the lack of a cognizable legal theory or the absence of sufficient facts alleged under a cognizable legal theory.” Balistreri v. Pacifica Police Dep’t, 901 F.2d 696, 699 (9th Cir. 1990). In evaluating whether a complaint states a claim on which relief may be granted, the court accepts as true the allegations in the complaint and construes the allegations in the light most favorable to the plaintiff. Hishon v. King & Spalding, 467 U.S. 69, 73 (1984); Love v. United States, 915 F.2d 1242, 1245 (9th Cir. 1989). “[R]ecitals of the elements of a cause of action, supported by mere conclusory statements, do not suffice” to state a valid claim for relief. Ashcroft v. Iqbal, 556 U.S. 662, 676 (2009). A complaint must do more than allege mere “labels and conclusions” or “a formulaic recitation of the elements of a cause of action.” Bell Atl. Corp. v. Twombly, 550 U.S. 544, 555 (2007). In order to state a valid claim for relief, a plaintiff must allege “enough facts to state a claim to relief that is plausible on its face.” Twombly, 550 U.S. at 570. A claim that is plausible on its face has sufficient factual content to allow a reasonable inference that the defendant is liable for the misconduct alleged. Iqbal, 556 U.S. at 678. This plausibility standard “asks for more than a sheer possibility that a defendant has acted unlawfully.” Id. III. Discussion A. CFAA Background “The CFAA was enacted in 1984 to enhance the government’s ability to prosecute computer crimes [and] was originally designed to target hackers[.]” LVRC Holdings LLC v. Brekka, 581 F.3d 1127, 1130 (9th Cir. 2009) (citing 18 U.S.C. § 1030). “The CFAA prohibits a number of different computer crimes, the majority of which involve accessing computers without authorization or in excess of authorization, and then taking specified forbidden actions, ranging from obtaining information to damaging a computer or computer data.” Id. at 1130. The CFAA is a criminal statute which creates a limited right of action for private persons injured by such crimes. See 18 U.S.C. § 1030(g). A private plaintiff must prove that the defendant violated one of the provisions of § 1030(a)(1)-(7), and that the violation involved at least one of five factors set forth by subclause in the statute. See LVRC Holdings LLC, 581 F.3d at 1131. B. The Parties’ Arguments Defendants argue plaintiff’s allegations concerning use of a fax machine not connected to a Sacramento County computer system cannot plausibly suggest a violation of 18 U.S.C. § 1030, which is premised on computer usage. Defendants note plaintiff’s complaint fails to allege which subsection of 1030(a) was violated, though defendants presume plaintiff intended to allege a violation of 18 U.S.C. § 1030(a)(4). Defendants argue the complaint fails to allege a violation of 18 U.S.C. § 1030(a)(4), in part, because no computer was alleged to be involved. Defendants also argue plaintiff failed to timely bring his claim within the applicable statute of limitations because he discovered the facts underlying the claims when he was released from prison in 2019 and did not bring them within 2 years. Defendants argue a claim under the CFAA does not lie against the County of Sacramento even if plaintiff had adequately alleged a violation of 18 U.S.C. § 1030. //// In opposition to the motion, plaintiff argues defendant Babbitt knowingly extorted money from plaintiff in violation of the CFAA under 18 U.S.C. § 1030(a)(7)1 with the use of a Sacramento County computer and fax machine by successfully changing plaintiff’s direct deposit information. Plaintiff argues defendant’s conduct violated another criminal statute, 18 U.S.C. § 1341, Frauds and Swindles. Plaintiff argues defendant Babbitt violated the Sacramento County Employee Handbook through the misuse of County resources, and that the County is liable because defendant Babbitt used a County computer and County fax machine to commit the alleged acts.2 C. Discussion The CFAA provides, in relevant part: Any person who suffers damage or loss by reason of a violation of this section may maintain a civil action against the violator to obtain compensatory damages and injunctive relief or other equitable relief. A civil action for a violation of this section may be brought only if the conduct involves 1 of the factors set forth in [subclause] (I), (II), (III), (IV), or (V) of subsection (c)(4)(A)(i). [….] No action may be brought under this subsection unless such action is begun within 2 years of the date of the act complained of or the date of the discovery of the damage. [….] 18 U.S.C. § 1030(g). Subclauses (I) through (V) set forth the following factors: (I) loss to 1 or more persons during any 1-year period… aggregating at least $5,000 in value; (II) the modification or impairment, or potential modification or impairment, of the medical examination, diagnosis, treatment, or care of 1 or more individuals; (III) physical injury to any person; (IV) a threat to public health or safety; ////
1 Plaintiff references 18 U.S.C. § 1030(7)(C), which does not exist. The court construes plaintiff’s argument as suggesting a violation of 18 U.S.C. § 1030(a)(7).
2 Plaintiff also argues defendants incorrectly reference 10 U.S.C. § 1030. Defendant’s reference to Title 10 (see ECF No. 5 at 1) in the moving papers appears to be a typographical error. The substance of defendants’ argument clearly addresses 18 U.S.C. § 1030. (V) damage affecting a computer used by or for an entity of the United States Government in furtherance of the administration of justice, national defense, or national security 18 U.S.C. § 1030(c)(4)(A)(i)(I)-(V). Of the above factors, the only potentially applicable factor is that in subclause (I), “loss to 1 or more persons during any 1-year period… aggregating at least $5,000 in value[.]” 18 U.S.C. § 1030(c)(4)(A)(i)(I). However, the complaint does not allege a loss to plaintiff aggregating at least $5,000 in value. Therefore, the complaint fails to state a cause of action under the CFAA. Moreover, while the CFAA allows recovery for losses beyond mere physical damage to property, the types of damages awarded by courts under the CFAA have generally been limited to costs related to the computer accessed. See Nexans Wires S.A. v. Sark-USA, Inc., 319 F. Supp. 2d 468, 475 (S.D.N.Y. 2004) (citing collected cases), aff’d, 166 F. App’x 559 (2nd Cir. 2006). “Even cases which have taken an expansive view of the CFAA jurisdictional threshold have not suggested that ‘loss’ can include a cost unrelated to the computer.” Id. at 474. Here, plaintiff’s alleged losses arising from the temporary redirection of his Veterans Disability pay are “too far removed from computer damage to count toward the jurisdictional threshold,” id. at 477, even if the losses did aggregate $5,000. In addition, the complaint does not currently allege that defendant Babbitt improperly accessed a computer or computer information as required to show a violation of 18 U.S.C. § 1030(a)(4). This subsection addresses a person’s conduct who does the following: knowingly and with intent to defraud, accesses a protected computer without authorization, or exceeds authorized access, and by means of such conduct furthers the intended fraud and obtains anything of value, unless the object of the fraud and the thing obtained consists only of the use of the computer and the value of such use is not more than $5,000 in any 1-year period. 18 U.S.C. § 1030(a)(4). As defendants argue, the complaint’s allegations are silent about any use of a computer by defendant Babbitt. But even if the complaint alleged use of a computer to commit the alleged acts, it would not state a claim. Defendant Babbitt’s commission of the alleged acts with a computer she was authorized to use for employment purposes would not qualify as “access[ing] a protected computer without authorization” within the meaning of 18 U.S.C. § 1030(a)(4). See Brodsky v. Apple Inc., 445 F. Supp. 3d 110, 129 (N.D. Cal. 2020) (explaining that “authorization” in the CFAA context is read in reference to the identity of the person accessing the computer or website). The plain language of the CFAA targets the access of computer information, rather than misuse or misappropriation. United States v. Nosal, 676 F.3d 854, 863 (9th Cir. 2012). Plaintiff argues in opposition to the motion to dismiss that defendant Babbitt committed a violation of 18 U.S.C. § 1030(a)(7). That subsection prohibits transmitting in interstate or foreign commerce any communication with “intent to extort from any person any money or other thing of value” when the transmission contains one of the following threats, demands, or requests for money related to a protected computer: (A) threat to cause damage to a protected computer; (B) threat to obtain information from a protected computer without authorization or in excess of authorization or to impair the confidentiality of information obtained from a protected computer without authorization or by exceeding authorized access; or (C) demand or request for money or other thing of value in relation to damage to a protected computer, where such damage was caused to facilitate the extortion; 18 U.S.C. § 1030(a)(7)(A)-(C). Defendant Babbitt’s alleged conduct did not involve any of the above threats, demands, or requests for money related to a protected computer. Thus, the complaint does not state a claim for a violation of 18 U.S.C. § 1030(a)(7). Finally, plaintiff’s opposition and hearing argument that defendant Babbitt committed fraud, and specifically that she violated 18 U.S.C. § 1341, Frauds and Swindles, must be rejected as a basis for denying the motion to dismiss or granting leave to amend. There is no private cause of action under 18 U.S.C. § 1341, a criminal statute prohibiting mail fraud. See Ateser v. Bopp, 29 F.3d 630 (9th Cir. 1994); Bell v. Health-Mor Inc., 549 F.2d 342, 346 (5th Cir. 1977). Plaintiff’s claim against the County of Sacramento also fails. Even if the complaint adequately alleged a CFAA violation, “neither the language nor the purpose of the CFAA are consistent with holding employers liable under that statute on a respondeat superior theory.” Doe v. Dartmouth-Hitchcock Medical Center, No. CIV. 00-100-M, 2001 WL 873063, at *6 (D.N.H. July 19, 2001). To any extent plaintiff would seek to hold the County liable for an alleged internal policy failure, the court finds no authority for such a claim to be brought under the CFAA. IV. Conclusion and Order The CFAA does not encompass recovery for loss of the type alleged in the complaint. The complaint fails to state a claim and must be dismissed. Under these circumstances, the court declines to address defendants’ argument that plaintiff's claim under the CFAA is barred by the statute of limitations. Because it is clear the deficiencies in the complaint cannot be cured through amendment, the complaint is dismissed without leave to amend. See Fed. R. Civ. P. 15(a); Lucas v. Dep’t of Corrs., 66 F.3d 245, 248 (9th Cir. 1995). For the foregoing reasons, IT IS ORDERED as follows: 1. Defendants’ motion to dismiss (ECF No. 5) is granted. 2. Plaintiff's complaint is dismissed without leave to amend. 3. The Clerk of the Court is directed to close this case. Dated: July 27, 2023 fed) / dha MIG f- A. CAROLYNK.DELANEY UNITED STATES MAGISTRATE JUDGE Rabbitt23ev923 utd