GADDY v. THE LONG & FOSTER COMPANIES, INC.

CourtDistrict Court, D. New Jersey
DecidedFebruary 10, 2023
Docket1:21-cv-02396
StatusUnknown

This text of GADDY v. THE LONG & FOSTER COMPANIES, INC. (GADDY v. THE LONG & FOSTER COMPANIES, INC.) is published on Counsel Stack Legal Research, covering District Court, D. New Jersey primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
GADDY v. THE LONG & FOSTER COMPANIES, INC., (D.N.J. 2023).

Opinion

[ECF No. 45]

THE UNITED STATES DISTRICT COURT FOR THE DISTRICT OF NEW JERSEY CAMDEN VICINAGE

MARIXSA GADDY, Civil Action No. 21-2396 (RBK)(EAP) Plaintiff,

v.

THE LONG & FOSTER COMPANIES, INC.,

Defendant.

OPINION This matter comes before the Court by way of Plaintiff Marixsa Gaddy’s Motion, ECF No. 45, seeking leave to file a Second Amended Complaint and to substitute a new lead plaintiff in this action. The Court has received Defendant The Long & Foster Companies Inc.’s opposition brief, ECF No. 52; Plaintiff’s reply brief, ECF No. 57; Defendant’s supplemental opposition, ECF No. 59; Plaintiff’s sur-reply, ECF No. 60; and Plaintiff’s sworn declaration, ECF No. 64-1. The Court held oral argument on the Motion on October 18, 2022. ECF Nos. 66, 67. The Court has considered the parties’ submissions and the arguments made at the Motion hearing. For the reasons that follow, Plaintiff’s Motion is GRANTED. FACTUAL BACKGROUND Defendant The Long & Foster Companies, Inc. (“Defendant”) is a private residential real estate company incorporated in Virginia with a principal place of business in Chantilly, Virginia. First Amended Class Action Complaint (“FAC”), ECF No. 11, ¶¶ 2, 52. Plaintiff Marixsa Gaddy is a former employee of Defendant.1 Id. ¶¶ 19-20. As a condition of her employment, Defendant required Plaintiff to provide her personal identifying information (“PII”), including her name, telephone number, financial account information, bank account numbers, date of birth, Social Security number, and other information contained on her IRS W-2 Forms. Id. ¶ 21. On August 22, 2020, Defendant was the victim of a ransomware attack perpetrated by an

unknown third party (the “Data Breach”). Id. ¶ 57. During the attack, the third party gained unauthorized access to the servers and systems of Defendant and its subsidiaries, potentially exposing the PII of at least tens of thousands of persons. Id. ¶¶ 57, 58. Defendant subsequently contacted the Federal Bureau of Investigation and cybersecurity experts to investigate the Data Breach. Id. ¶ 59. On or about September 14, 2020, Defendant sent letters to Plaintiffs and other potentially affected individuals notifying them of the Data Breach. Id. ¶ 60, Ex. 1. Defendant identified additional persons who were possibly impacted by the Data Breach, including property managers and vacation rental owners, and notified those individuals in a letter dated December 1, 2020. Id. ¶ 13, Ex. 2.

In these letters, Defendant stated that “cybercriminal(s) had access to Long & Foster’s systems on August 22, 2020,” and that affected individuals’ “personal information may have been accessible to the cybercriminal(s) as a result.” Id., Ex. 1 at 1; see id., Ex. 2 at 1. However, Defendant reported that it had “no indication at this time” that the hackers accessed the individuals’ PII. Id., Ex. 1 at 1; see id., Ex. 2 at 1. The letters further stated that the affected information potentially included individuals’ names, telephone numbers, dates of birth, Social Security numbers, bank account information, and details of IRS Forms W-2, W-9, and 1099. Id., Ex. 1 at

1 On March 16, 2022, the Court granted in part and denied in part Defendant’s motion to dismiss the First Amended Complaint. See ECF No. 32. Consequently, the Court dismissed William O’Bryant and Shawn Marie Ryan as plaintiffs in this action because they lacked Article III standing. Id. at 6-11. 1; Ex. 2 at 1. Defendant offered the affected individuals twenty-four months of complimentary identity protection services. Id., Ex. 1 at 1; Ex. 2 at 1. PROCEDURAL HISTORY On February 11, 2021, Plaintiffs commenced a putative class action on behalf of themselves and a class of other individuals affected by the Data Breach. Class Action Complaint,

ECF No. 1. On May 18, 2021, Plaintiffs filed a First Amended Complaint, pleading various causes of action. FAC, ECF No. 11. Plaintiffs alleged that Defendant was aware of the risk of cyberattacks and that the Data Breach was preventable, but Defendant failed to implement cyber security procedures and protocols necessary to protect the Plaintiffs’ PII. Id. ¶¶ 81, 87, 93. Plaintiffs alleged that they experienced: (1) “lost time, annoyance, interference, and inconvenience”; (2) “anxiety and increased concerns for the loss of [their] privacy”; (3) “damages to and diminution in the value of [their] PII”; and (4) “imminent and impending injury arising from the substantially increased risk of fraud, identity theft, and misuse resulting from [their] PII[.]” Id. ¶¶ 28-30, 38-40, 48-50, 78. In addition, Plaintiff Marixsa Gaddy alleged that an unauthorized third

person opened a credit card in her name with PII exposed in the Data Breach. Id. ¶¶ 22-23. On June 25, 2021, Defendant moved to dismiss the First Amended Complaint pursuant to Federal Rules of Civil Procedure 12(b)(1) and 12(b)(6). Motion to Dismiss, ECF No. 16. On March 16, 2022, the Hon. Robert B. Kugler, U.S.D.J. issued an Opinion granting Defendant’s motion in part and denying it in part. Opinion on Defendant’s Motion to Dismiss (“MTD Opinion”), ECF No. 32. Plaintiffs Shawn Marie Ryan (“Ryan”) and William O’Bryant (“O’Bryant”) were dismissed because their alleged injuries were not sufficiently “concrete” or “actual or imminent” to give them Article III standing. Id. at 6. However, the Court found that Plaintiff Marixsa Gaddy (“Gaddy”) had standing because she pled a sufficiently concrete injury to her privacy interests in the fraudulent opening of a credit card in her name, which was fairly traceable to the Data Breach. Id. at 12. Still, each of Gaddy’s causes of action were dismissed except for her negligence claim and her Declaratory Judgment Act claim, to the extent that it was premised on a negligence cause of action. Id. at 25-28. On July 15, 2022, Plaintiff’s counsel filed the present Motion requesting the Court’s leave

to file a proposed Second Amended Complaint and to substitute previously dismissed Plaintiff Ryan for Gaddy as lead Plaintiff. Brief in Support Plaintiff’s Motion to Amend First Amended Class Action Complaint (“Pl.’s Br.”), ECF No. 45-1. Plaintiff’s counsel alleges that they had lost contact with Gaddy because they had received no responses to their repeated calls and emails. Pl.’s Br. at 3. And because of that lack of communication, Plaintiff’s counsel had been unable to obtain discovery responses from Gaddy. Id. In addition, Plaintiff’s counsel argues that Ryan is a proper lead plaintiff because she now has standing. Id. at 2-3. Ryan alleges in the proposed Second Amended Complaint that she discovered an unauthorized charge on her Capital One credit card around August 2021. Pl.’s Br., Ex. 2, ¶ 23. Consequently, Capital One cancelled her credit card

and mailed her a replacement card. Id. Ryan further alleges in the proposed Second Amended Complaint that in June 2022, a third party again attempted to place an unauthorized charge on Ryan’s Capital One credit card. Id. ¶ 25. Also, following the Data Breach, an unauthorized individual opened an account on a dating website in the Netherlands using Ryan’s identity.2 Id. ¶ 29. Plaintiff’s counsel argues that these new developments are sufficiently concrete injuries in fact that now give Ryan Article III standing to bring her claims. Pl.’s Br. at 2.

2 The proposed Second Amended Complaint does not attempt to revive any of the causes of action dismissed in the Court’s prior Order on the Defendant’s Motion to Dismiss. See Order, ECF No. 33. Instead, Ryan only seeks to bring claims based on common law negligence and for declaratory relief. See Pl’s. Br., Ex. 2, ¶¶ 95, 117. On August 8, 2022, Defendant filed opposition to Plaintiff’s Motion. Defendant’s Opposition Brief (“Def.’s Br.”), ECF No. 52.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Whitmore Ex Rel. Simmons v. Arkansas
495 U.S. 149 (Supreme Court, 1990)
Lujan v. Defenders of Wildlife
504 U.S. 555 (Supreme Court, 1992)
Raines v. Byrd
521 U.S. 811 (Supreme Court, 1997)
Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Ashcroft v. Iqbal
556 U.S. 662 (Supreme Court, 2009)
Adams v. Gould Inc.
739 F.2d 858 (First Circuit, 1984)
Reilly Ex Rel. Pluemacher v. Ceridian Corp.
664 F.3d 38 (Third Circuit, 2011)
Curtis Long v. Harry Wilson, Superintendent
393 F.3d 390 (Third Circuit, 2004)
Jean Resnick v. AvMed, Inc.
693 F.3d 1317 (Eleventh Circuit, 2012)
Travelers Indem. Co. v. Dammann & Co., Inc.
594 F.3d 238 (Third Circuit, 2010)
Briscoe v. Klaus
538 F.3d 252 (Third Circuit, 2008)
Cureton v. National Collegiate Athletic Ass'n
252 F.3d 267 (Third Circuit, 2001)
Spokeo, Inc. v. Robins
578 U.S. 330 (Supreme Court, 2016)
In Re Nickelodeon Consumer Privacy Litigation
827 F.3d 262 (Third Circuit, 2016)
Joan Mullin v. Karen Balicki
875 F.3d 140 (Third Circuit, 2017)
Long v. Se. Pa. Transp. Auth.
903 F.3d 312 (Third Circuit, 2018)

Cite This Page — Counsel Stack

Bluebook (online)
GADDY v. THE LONG & FOSTER COMPANIES, INC., Counsel Stack Legal Research, https://law.counselstack.com/opinion/gaddy-v-the-long-foster-companies-inc-njd-2023.