Caces-Tiamson v. Equifax

• Court: District Court, N.D. California
• Decided: March 20, 2020
• Docket: 3:20-cv-00387
• Status: Unknown

Opinion

1 2 3 4 UNITED STATES DISTRICT COURT 5 NORTHERN DISTRICT OF CALIFORNIA 6 7 MARIA ASELA CACES-TIAMSON, Case No. 20-cv-00387-EMC

8 Plaintiff, ORDER GRANTING DEFENDANT’S 9 v. MOTION TO DISMISS FOR LACK OF PERSONAL JURISDICTION 10 EQUIFAX, Docket No. 7 11 Defendant.

12 13 14 Plaintiff Maria Asela Caces-Tiamson, proceeding pro se, has filed suit against Defendant 15 Equifax. The suit is related to a data breach that occurred at Equifax and that the company 16 announced in September 2017. Currently pending before the Court is Equifax’s motion to dismiss 17 for lack of personal jurisdiction and to dismiss for failure to state a claim for relief. 18 Having considered the parties’ briefs and accompanying submissions, the Court finds this 19 matter suitable for resolution without oral argument and thus VACATES the hearing on the 20 motion. Equifax’s motion to dismiss based on lack of personal jurisdiction is hereby GRANTED. 21 I. FACTUAL & PROCEDURAL BACKGROUND 22 Although Ms. Caces-Tiamson’s complaint is not a model of clarity, it appears that her 23 position is as follows. 24 In November 2019, Ms. Caces-Tiamson sent a letter to Equifax, stating that she was “a 25 victim of the fraudulent data breach that occurred at your company and [that] was reported” in 26 September 2017. See Compl., Ex. 1 (letter). In the same letter, Ms. Caces-Tiamson asked Equifax 27 to provide “proofs of claim” on, inter alia, the following issues: (1) that, in September 2017, it did 1 announcing it; (3) that it did not intentionally try to cover up the data breach; (4) that it protected 2 her personal data and did not allow it to be stolen; (5) that it is not liable to her for damages; etc. 3 Ms. Caces-Tiamson asked Equifax to respond within ten days and then concluded her letter by 4 stating:

5 A non-response and[/]or failure to provide Proof of Claim will constitute agreement by you, and that the undersigned can exercise 6 the remedy provided by all applicable laws, federal, state and local. Your non-response will equate to commercial acquiescence to the 7 terms outlined by the undersigned in a final Affidavit and Notice of Default. 8 9 Compl., Ex. 1. 10 Apparently, Equifax did not respond to Ms. Caces-Tiamson’s letter. Accordingly, in 11 January 2020, she filed the instant action in federal court. In the complaint, Ms. Caces-Tiamson 12 states that she has exhausted her remedies with Equifax; that she gave Equifax an opportunity to 13 provide “proofs of claim”; that Equifax was “sent a Notice of Fault and Opportunity to Cure [but] 14 failed to respond”1; and that, “[t]hrough [the] non-response and silence, [Equifax has] quietly 15 agreed to all of the facts as outlined in the Notice of Default.[2] Therefore the Plaintiff states a 16 superior claim upon which relief can be granted.” Compl. at 4, 6. 17 II. DISCUSSION 18 A. Legal Standard 19 A defendant may move to dismiss based on lack of personal jurisdiction pursuant to 20 Federal Rule of Civil Procedure 12(b)(2). 21 22 1 Equifax has provided to the Court a copy of Ms. Caces-Tiamson’s “Notice of Fault and Opportunity to Cure” document. See Morris Decl., Ex. 3 (notice). The notice is dated November 23 18, 2019. In the notice, Ms. Caces-Tiamson states, inter alia, that Equifax failed to provide the proofs of claim that she requested; that Equifax was, as a result, “in fault”; that Equifax had “the 24 right to cure this fault”; and that, if it did not cure the fault, “I will establish an affidavit of default.” Morris Decl., Ex. 3. 25 2 Equifax has also provided to the Court a copy of the Ms. Caces-Tiamson’s “Affidavit and Notice 26 of Default” document. See Morris Decl., Ex. 3 (notice). In the affidavit and notice, dated December 2, 2019, Ms. Caces-Tiamson states, inter alia, that she sent to Equifax “a Conditional 27 Acceptance requesting Proofs of Claim” and that Equifax “has willingly, knowingly, intentionally, or voluntarily agreed and acquiesced through its non-response to the facts stated herein” – e.g., 1 In opposing a defendant’s motion to dismiss for lack of personal jurisdiction, the plaintiff bears the burden of establishing that 2 jurisdiction is proper. Where, as here, the defendant’s motion is based on written materials rather than an evidentiary hearing, the 3 plaintiff need only make a prima facie showing of jurisdictional facts to withstand the motion to dismiss. The plaintiff cannot 4 “simply rest on the bare allegations of its complaint,” but uncontroverted allegations in the complaint must be taken as true. 5 6 Mavrix Photo, Inc. v. Brand Techs., Inc., 647 F.3d 1218, 1223 (9th Cir. 2011); see also Data Disc, 7 Inc. v. Sys. Tech. Assocs., Inc., 557 F.2d 1280, 1285 (9th Cir. 1977) (noting that “[t]he limits 8 which the district judge imposes on the pre-trial proceedings will affect the burden which the 9 plaintiff is required to meet”). In addition, all disputed facts are resolved in favor of the plaintiff. 10 See Pebble Beach Co. v. Caddy, 453 F.3d 1151, 1154 (9th Cir. 2006); see also Freestream 11 Aircraft (Berm.) Ltd. v. Aero Law Grp., 905 F.3d 597, 602 (9th Cir. 2018) (stating that 12 “[u]ncontroverted allegations in the complaint must be taken as true, and factual disputes are 13 construed in the plaintiff’s favor”). 14 The test for personal jurisdiction of this Court is clear:

15 Where, as here, no federal statute authorizes personal jurisdiction, the district court applies the law of the state in which the court sits. 16 California’s long-arm statute, Cal. Civ. Proc. Code § 410.10, is coextensive with federal due process requirements, so the 17 jurisdictional analyses under state law and federal due process are the same. For a court to exercise personal jurisdiction over a 18 nonresident defendant consistent with due process, that defendant must have “certain minimum contacts” with the relevant forum 19 “such that the maintenance of the suit does not offend ‘traditional notions of fair play and substantial justice.’” 20 21 Mavrix, 647 F.3d at 1223. 22 B. General Jurisdiction 23 “There are two categories of personal jurisdiction: (1) general jurisdiction and (2) specific 24 jurisdiction.” Freestream, 905 F.3d at 602. The Court addresses first whether it has general 25 jurisdiction over Equifax. 26 Where there is general jurisdiction over a defendant, the plaintiff can bring any claim 27 against the defendant in the forum state. Thus, in order for general jurisdiction to obtain, the 1 defendant essentially at home in the forum State. See Daimler AG v. Bauman, 571 U.S. 117, 122, 2 128 (2014); see also Schwarzenegger v. Fred Martin Motor Co., 374 F.3d 797, 807 (9th Cir. 3 2004) (asking whether the defendant has continuous and systematic contacts that approximate 4 physical presence in the forum state). “With respect to a corporation, the place of incorporation 5 and principal place of business are ‘paradig[m] . . . bases for general jurisdiction.’” Daimler, 571 6 U.S. at 137. Although the Supreme Court has not held that “a corporation may be subject to 7 general jurisdiction only in a forum where it is incorporated or has its principal place of business,” 8 the Court has also rejected the proposition that there is general jurisdiction over a corporation “in 9 every State in which a corporation ‘engages in a substantial, continuous, and systematic course of 10 business.’ That formulation . . . is unacceptably grasping.” Id. (emphasis in original); see also id. 11 at 139 (stating that the inquiry is “not whether a foreign corporation’s in-forum contacts can be 12 said to be in some sense ‘continuous and systematic’” but rather “whether that corporation’s 13 ‘affiliations with the State are so “continuous and systematic” as to render [it] essentially at home 14 in the forum State’”). 15 In the instant case, Ms. Caces-Tiamson has failed to make out a prima facie case of general 16 jurisdiction. Equifax is a Georgia corporation; it also has its principal place of business there. See 17 Morris Decl., Exs. 1-2 (business information for Equifax as provided by the Georgia Corporations 18 Division). There is nothing to indicate that Equifax has affiliations with California that are so 19 continuous and systematic as to render it essentially at home in California. In her opposition brief, 20 Ms. Caces-Tiamson cites to a non-Equifax website (called “craft.co”) indicating that Equifax has 21 two offices in California: one in Escalon and the other in Concord. See Opp’n at 2 & Ex. 2 22 (information on Equifax locations as provided by www.craft.co/equifax/locations). But even 23 accepting that evidence as true, that does not establish that Equifax’s affiliations with California 24 are so continuous and systematic as to render it essentially at home in the state. Indeed, Equifax 25 has submitted evidence as part of its reply brief, reflecting that (1) it “has never maintained a site 26 located in Escalon” and that (2) it previously “maintained an operations site in Concord . . . to 27 handle unemployment compensation claims concerning customers of [Equifax Workforce 1 to the network which was impacted in the data security incident announced publicly by Equifax 2 Inc. in September 2017” and the site “closed in Q2 2018.” Bekaert Decl. ¶¶ 5-7.”). That does not 3 come close to satisfying the Daimler test. 4 C. Specific Jurisdiction 5 The Ninth Circuit has a three-part test to determine whether there is specific jurisdiction 6 over a claim.

7 (1) The non-resident defendant must purposefully direct his activities or consummate some transaction with the forum or 8 resident thereof; or perform some act by which he purposefully avails himself of the privilege of conducting activities in the forum, 9 thereby invoking the benefits and protections of its laws;

10 (2) the claim must be one which arises out of or relates to the defendant’s forum-related activities; and 11 (3) the exercise of jurisdiction must comport with fair play and 12 substantial justice, i.e., it must be reasonable. 13 Freestream, 905 F.3d at 603. 14 In the instant case, the critical issue is (1) above. As to whether the purposeful 15 availment/purposeful direction requirement has been met, the Court must first ask what exactly is 16 the nature of the claim that Ms. Caces-Tiamson is bringing. 17 If Ms. Caces-Tiamson were bringing some kind of tort claim against Equifax for not 18 preventing the data breach, then the Court would apply a purposeful direction analysis. See In re 19 Boon Glob., Ltd., 923 F.3d 643, 651 (9th Cir. 2019) (“‘The exact form of our jurisdictional inquiry 20 depends on the nature of the claim at issue.’ For claims sounding in contract, a purposeful 21 availment test is used; for claims sounding in tort a purposeful direction test is used.”). Under that 22 analysis, Ms. Caces-Tiamson cannot establish even a prima facie case of specific jurisdiction 23 because, as Equifax argues, “any and all actions which Equifax did or allegedly did not take with 24 respect to its data security systems” would presumably have occurred in Georgia, where Equifax 25 has its principal place of business. Mot. at 2. The fact that Ms. Caces-Tiamson suffered injury in 26 California (i.e., where she resides) as a result of Equifax’s actions or omissions is not enough to 27 support specific jurisdiction. See In re Packaged Seafood Prods. Antitrust Litig., 338 F. Supp. 3d 1 (2014)], something more is required than ‘imposition of an injury . . . to be suffered by the 2 plaintiff while she is residing in the forum state.’”). 3 A plaintiff’s “residency in the forum state is not the sine qua non of 4 specific jurisdiction.” Neither is where the Plaintiff experienced her injury. Rather, the Supreme Court has instructed [in Walden] that 5 “t]he proper question is not where the plaintiff experienced a particular injury or effect but whether the defendant’s conduct 6 connects him to the forum in a meaningful way.” 7 Dubose v. Bristol-Myers Squibb Co., No. 17-cv-00244-JST, 2017 U.S. Dist. LEXIS 99504, at *6 8 (N.D. Cal. June 27, 2017). 9 Nor can specific jurisdiction be based on the mere fact that Equifax provides services to 10 customers nationwide, including but not limited to California. See Asahi Metal Indus. Co., Ltd. v. 11 Sup. Ct. of California, Solano County, 480 U.S. 102, 112 (1987) (stating that “[t]he ‘substantial 12 connection’ between the defendant and the forum State necessary for a finding of minimum 13 contacts must come about by an action of the defendant purposefully directed toward the forum 14 State” and that “[t]he placement of a product into the stream of commerce, without more, is not an 15 act the defendant purposefully directed toward the forum state”) (emphasis in original). 16 In her opposition brief, Ms. Caces-Tiamson’s tries to link the data breach to California 17 because Equifax purportedly has two California offices and “[t]he computer systems in these 18 locations are networked . . . to the computer at Equifax’s Headquarters in Georgia, sharing data.” 19 Opp’n at 3. Ms. Caces-Tiamson, however, has not shown that data breach or the failure to prevent 20 the data breach is tied to the California offices specifically. See pages 4-5, supra (discussing 21 evidence provided by Equifax as part of its reply brief regarding the alleged Escalon office and the 22 Concord office). 23 The only wrinkle here is that Ms. Caces-Tiamson has framed her complaint in an odd way. 24 Based on the allegations in her complaint, she does not purport to be bringing a direct tort claim 25 based on Equifax’s failure to prevent the data breach. Rather, she asserts in the complaint that (1) 26 she gave Equifax an opportunity to provide proof that it was not at fault, (2) Equifax failed to 27 respond, and (3) thus Equifax should be deemed to have admitted to liability (i.e., is in some kind 1 the problematic nature of personal jurisdiction still obtains. In any event, there is nothing to 2 || indicate that Equifax’s failure to respond to Ms. Caces-Tiamson’s notice occurred in California, 3 || rather than Georgia. Again, specific jurisdiction must be based on “contacts that the ‘defendant 4 || himself creates with the forum state.” Walden, 571 U.S. at 284 (emphasis in original). The 5 ““minimum contacts’ analysis looks to the defendant’s contacts with the forum State itself, not the 6 || defendant’s contacts with persons who reside there.” /d. at 285. 7 Finally, even if the Court were to apply a purposeful availment analysis, “[t]he purposeful 8 || availment standard requires more than foreseeability of causing injury in another state.” Terracom 9 v. Valley Nat. Bank, 49 F.3d 555, 560 (9th Cir. 1995) (adding that “‘the foreseeability that is 10 || critical to due process analysis ... is that the defendant’s conduct and connection with the forum 11 State are such that he should reasonably anticipate being haled into court there’”). Ms. Caces- 12 || Tiamson has not made a sufficient showing of specific jurisdiction. g 13 I. CONCLUSION 14 For the foregoing reasons, the Court grants Equifax’s motion to dismiss based on lack of 3 15 || personal jurisdiction. Because the Court is granting the motion to dismiss based on lack of a 16 || personal jurisdiction, it need not address Equifax’s secondary argument in support of dismissal,

17 i.e., failure to state a claim for relief. 18 The Clerk of the Court is directed to close the file in this case. 19 This order disposes of Docket No. 7. 20 21 IT IS SO ORDERED. 22 23 || Dated: March 20, 2020 24 25 : hfe □□ ED M. CHEN 26 United States District Judge 27 28