FULTON-GREEN v. ACCOLADE, INC.

CourtDistrict Court, E.D. Pennsylvania
DecidedSeptember 24, 2019
Docket2:18-cv-00274
StatusUnknown

This text of FULTON-GREEN v. ACCOLADE, INC. (FULTON-GREEN v. ACCOLADE, INC.) is published on Counsel Stack Legal Research, covering District Court, E.D. Pennsylvania primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
FULTON-GREEN v. ACCOLADE, INC., (E.D. Pa. 2019).

Opinion

IN THE UNITED STATES DISTRICT COURT FOR THE EASTERN DISTRICT OF PENNSYLVANIA

TASHICA FULTON-GREEN and : DANIEL CREVAK, on behalf of : CIVIL ACTION themselves and all others similarly : situated, : Plaintiffs : v. : NO. 18-274 ACCOLADE, INC., : Defendant : MEMORANDUM gl PRATTER, J. SEPTEMBERA 72019

This case stems from a data breach that resulted when an Accolade employee released all of the W-2s for its U.S.-based employees to a cybercriminal. After negotiations and mediation, the parties entered into a settlement agreement, filed a motion for final approval, and Class Counsel filed an unopposed motion for attorneys’ fees. Because the settlement is fair, reasonable, and adequate, the Court grants the parties’ motion for final approval. Because the proposed attorneys’ fees are reasonable, the Court grants Class Counsel’s motion for attorneys’ fees. BACKGROUND In January 2017, Accolade, Inc. was the target of a “phishing” scheme.””! A cybercriminal requested the W-2s for current and former U.S.-based Accolade employees from an Accolade employee who then sent the unencrypted files via email. The W-2s included personally identifying information (PII) such as employees’ names, addresses, Social Security Numbers, salaries, and

A “phishing” scheme is an attempt to acquire personal information, such as usernames, passwords, credit card details, and other sensitive information, by masquerading as a trustworthy entity or individual through an electronic communication, such as email.

taxes withheld for 2016. Tashica Fulton-Green’s and Daniel Crevak’s PII was included in the breach. They filed suit against Accolade on behalf of themselves and all others similarly situated alleging negligence, negligence per se, breach of implied contract, and breach of fiduciary duty. The parties entered into a settlement agreement following negotiations and a private mediation overseen by Rodney A. Max of Upchurch Watson White & Max. The parties agreed to settle this action, pursuant to the terms of their settlement agreement, and subject to the approval and determination of the Court as to the fairness, reasonableness, and adequacy of the settlement. Final approval of the settlement will result in dismissal of this action with prejudice. Per the terms of the preliminary settlement approval, the parties filed a motion for final approval and Class Counsel filed an unopposed motion for attorneys’ fees. The notice deadline regarding this class settlement was 30 days after preliminary approval, which was docketed on January 24, 2019. The claims deadline is February 17, 2020; however, the opt-out/objection deadline was May 23, 2018. No one filed an opt-out or objection despite the fact that the notice program reached 98.8% of class members. I. Class Definition The settlement class consists of: All current and former Accolade employees whose W-2 data was compromised as a result of the Data Disclosure which occurred on or about January 17, 2017. II. Settlement Terms Under the settlement, all class members are entitled to enroll in identity theft protection for 24 months through Experian’s ProtectMyID service. Class members who have already enrolled in the program will be instructed on how to enroll for an additional 24 months. Class members are also entitled to seek reimbursement for four claim categories (A—-D), with an overall cap of $1,500 paid to each class member. However, participants must have spent at least one full hour

dealing with the theft of their PII before they can claim any lost time. The treatment of each claim category is set out as follows: Claim Category A: Class members who had a false tax return filed after January 16, 2017 are eligible for a basic payment of $75. They must provide proof of the false tax return, attest that they have no knowledge of a false return being filed in the previous three years, submit a self- verifying statement for time spent dealing with the effects of the breach, and submit documentation of recovery. Accolade will reimburse claimants at $25 per hour spent dealing with the effects of a false tax return. There is a maximum recovery of $275 per claimant for claims made pursuant to Claim Category A. Claim Category B: Class members who had an Internal Revenue Service (IRS) tax transcript requested using their PII after January 16, 2017 and submitted an identity theft affidavit to the IRS are eligible for payment of $75. They must provide proof of the issuance of a tax transcript by the IRS and submission of an identity theft affidavit, attest that they have no knowledge of an IRS transcript being fraudulently requested using their PII in the previous three years, and submit a self-verifying statement for time spent dealing with the effects of the breach. Accolade will reimburse Category B claimants at $25 per hour spent dealing with the effects of having their IRS tax transcript requested using their PII]. There is a maximum per claimant recovery of $125 for claims made pursuant to Claim Category B. Claim Category C: Class members who experienced incidents of identity theft or financial fraud (other than those covered by Categories A and B) after January 16, 2017 are eligible for payment of $75. This includes the opening of new bank accounts, credit applications, FAFSA applications, etc. It does not include fraud on existing credit cards. These Category C class members must provide proof of fraudulent activity or details of such activity and why proof does

not exist, attest that they have no knowledge of identity theft (other than fraudulent credit card activity) filed in the previous three years, and submit a self-verifying statement for time spent dealing with the effects of the breach. Accolade will reimburse claimants at $25 per hour spent dealing with the effects of identity theft. There is a maximum per claimant recovery of $275 for claims made pursuant to Claim Category C. Claim Category D: Class members who claim they suffered out of pocket expenses (other than those covered in categories A, B, or C) as a result of the data disclosure are entitled to reimbursement of such amount. They must submit reasonable documentation supporting their claim for expenses, proof of fraudulent activity or details of such activity or why proof does not exist, include a detailed explanation of the activities related to the data disclosure that the claimant spent time on, and submit a self-verifying statement for time spent dealing with the effects of the breach. Accolade will reimburse claimants at $25 per hour spent for up to 3 hours for claims made pursuant to Claim Category D. Claimants are not entitled to reimbursement of expenses that have already been reimbursed through Experian or any other source. Injunctive Relief: The settlement agreement also provides for injunctive relief which includes undertaking and maintaining the following cybersecurity measures for two years: cybersecurity awareness and training program, training employees on new policies for handling PII, implementing and operating systems to help detect and filter phishing attempts, restricting access to tax and payroll information, random testing of policies, and access control review. Claims Administration: The preliminary settlement approval appointed Epiq to administer the claims in the order they are received. To make a claim, a Settlement Class Member must submit a valid, timely, and sworn Claim Form by the deadline of February 17, 2020. Class

members have 30 days from the date of a written notice to cure any deficiencies in their claim forms. III. Class Member Response After the Court granted preliminary approval in January 2019, the Settlement Administrator mailed 937 Notices via First Class Mail to all Setthement Class Members. According to the parties, the Notice Program reached 98.8% (or 925 out of 937) of the Settlement Class.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Amchem Products, Inc. v. Windsor
521 U.S. 591 (Supreme Court, 1997)
Sheinberg v. Sorensen
606 F.3d 130 (Third Circuit, 2010)
In Re Pet Food Products Liability Litigation
629 F.3d 333 (Third Circuit, 2010)
Wal-Mart Stores, Inc. v. Dukes
131 S. Ct. 2541 (Supreme Court, 2011)
Collins v. Dupont De Nemours & Company
34 F.3d 172 (Third Circuit, 1994)
Baby Neal v. Casey
43 F.3d 48 (Third Circuit, 1994)
In Re: Cendant Corporation Litigation
264 F.3d 201 (Third Circuit, 1992)
Robert Stewart v. Lynne Abraham
275 F.3d 220 (Third Circuit, 2001)
Dewey v. Volkswagen Aktiengesellschaft
681 F.3d 170 (Third Circuit, 2012)
In Re Hydrogen Peroxide Antitrust Litigation
552 F.3d 305 (Third Circuit, 2009)
In Re Insurance Brokerage Antitrust Litigation
579 F.3d 241 (Third Circuit, 2009)
Boone v. City of Philadelphia
668 F. Supp. 2d 693 (E.D. Pennsylvania, 2009)
Charles v. Goodyear Tire and Rubber Co.
976 F. Supp. 321 (D. New Jersey, 1997)
Lake v. First Nationwide Bank
900 F. Supp. 726 (E.D. Pennsylvania, 1995)
In Re Computron Software, Inc., Securities Litigation
6 F. Supp. 2d 313 (D. New Jersey, 1998)
Reibstein v. RITE AID CORPORATION
761 F. Supp. 2d 241 (E.D. Pennsylvania, 2011)

Cite This Page — Counsel Stack

Bluebook (online)
FULTON-GREEN v. ACCOLADE, INC., Counsel Stack Legal Research, https://law.counselstack.com/opinion/fulton-green-v-accolade-inc-paed-2019.