In re Accellion, Inc. Data Breach Litigation

District Court, N.D. California·Decided February 10, 2023·No. 5:21-cv-01155·Unknown

Opinion

MADALYN BROWN, et al., Case No. 5:21-cv-01155-EJD

Plaintiffs, ORDER DENYING MOTION TO INTERVENE v.

ACCELLION, INC., et al., Re: ECF No. 94 Defendants.

Counsel for a class of Washington plaintiffs who were injured by a data breach involving Accellion, Inc. and the Washington State Auditor’s Office (“Proposed Intervenors”) seek to intervene in this consolidated action to oppose the preliminary approval of the Parties’ proposed settlement. Notice of Motion and Motion to Intervene (“Mot.”), ECF No. 94. Certain Plaintiffs and Defendants oppose Proposed Intervenors’ motion. Having considered the parties’ and Proposed Intervenors’ submissions, the Court DENIES the motion to intervene. A. Accellion and the Data Breach Defendant Accellion, Inc. is a cloud-based software company that offered products and services for secure file transfers between third parties. One such product was the File Transfer Appliance (“FTA”). In December 2020, several threat actors exploited vulnerabilities in the FTA product, allowing them to access and steal sensitive data from FTA clients. The Washington State Auditor’s Office (“SAO”) was one such institution who had used FTA to transfer files relating to an audit of the State’s unemployment benefits program. As a result, the data breach compromised the personal identifying information of 1.6 million Washington unemployment claimants, including names, Social Security numbers, dates of birth, street and email addresses, and bank and routing numbers. Mot. 3. B. Proposed Intervenors’ Proceedings On February 2, 2021, Proposed Intervenors initiated proceedings in Washington State Superior Court titled, Stone v. Accellion USA LLC, Case No. 21-2-01439-5 SEA. Proposed Intervenors assert claims against both Accellion and the SAO, and no other class action has pursued claims against the SAO. Decl. David Berger (“Berger Decl.”) ¶ 18, ECF No. 94-1. The proceedings in Stone have progressed to dispositive motions, where the SAO’s motion to dismiss was denied and Accellion’s motion to dismiss has been heard but remains pending. Id. ¶¶ 8–15. On January 6, 2022, plaintiffs in a case before this Court—Fehlen, et al. v. Accellion, Case No. 5:21-cv-01353-EJD—filed a stipulation to amend their complaint to include a plaintiff injured in the breach of SAO’s data and information. Shortly thereafter, on January 12, 2022, the Fehlen plaintiffs filed a motion for preliminary approval of a class-wide settlement against Accellion that purported to release the Proposed Intervenors’ claims against Accellion. Mot. 6–7. The Washington state court subsequently stayed the Stone proceedings pending the settlement proceedings in Fehlen. Berger Decl. ¶ 16. On March 14, 2022, the Court consolidated all cases arising from the Accellion data breach except for Cochran v. Kroger Co., Case No. 5:21-cv-01887-EJD. ECF No. 83. This consolidation included the Fehlen action in which the proposed Accellion class settlement was pending preliminary approval. On May 5, 2022, Proposed Intervenors filed their motion with the Court, seeking intervention to stay SAO-related claims against Accellion and to challenge the motion for preliminary approval. ECF No. 94. Accellion and the Fehlen plaintiffs opposed intervention. After the motion to intervene was fully briefed but before it was heard, the Court terminated all pending motions for preliminary approval of class settlement, including the settlement with Accellion. ECF No. 109. A court must permit a nonparty to intervene in a pending lawsuit and gain party status if a federal statute confers an unconditional right to intervene. Fed. R. Civ. P. 24(a)(1). Where, as here, the nonparty does not claim a right to intervene by a federal statute, the party must show that:

Free access — add to your briefcase to read the full text and ask questions with AI

In re Accellion, Inc. Data Breach Litigation, (N.D. Cal. 2023).

In re Accellion, Inc. Data Breach Litigation (In re Accellion, Inc. Data Breach Litigation) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Gourdet v. Holder
587 F.3d 1 (First Circuit, 2009)
United States v. Joseph F. Anzalone
783 F.2d 10 (First Circuit, 1986)
California Ex Rel. Lockyer v. United States
450 F.3d 436 (Ninth Circuit, 2006)
David Swinton v. Adam J. Starke
960 F.3d 1001 (Eighth Circuit, 2020)
Donnelly v. Glickman
159 F.3d 405 (Ninth Circuit, 1998)