In re: Brinker Data Incident Litigation

CourtDistrict Court, M.D. Florida
DecidedApril 14, 2021
Docket3:18-cv-00686
StatusUnknown

This text of In re: Brinker Data Incident Litigation (In re: Brinker Data Incident Litigation) is published on Counsel Stack Legal Research, covering District Court, M.D. Florida primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
In re: Brinker Data Incident Litigation, (M.D. Fla. 2021).

Opinion

UNITED STATES DISTRICT COURT MIDDLE DISTRICT OF FLORIDA JACKSONVILLE DIVISION

In re Brinker Data Incident Litigation

Case No. 3:18-cv-686-TJC-MCR

ORDER This data breach class action is again before the Court, this time in the context of a motion for class certification and a related motion to exclude expert opinions and testimony. Three Named Plaintiffs bring this class action after their payment card and personal information was stolen from Defendant Brinker International, Inc. by hackers. I. FACTS AND PROCEDURAL POSTURE A. Facts The Court has detailed the facts of this case in prior orders (Docs. 65, 92, 122), but several new facts have come to light with additional discovery. In short, Brinker, the parent company that owns Chili’s restaurants, experienced a data breach where customers’ personal and payment card information was stolen. (Doc. 95 ¶¶ 1–2). Three Named Plaintiffs, Shenika Theus, Michael Franklin, and Eric Steinmetz, seek to represent themselves and those similarly situated in a class action against Brinker. Id. at 1. Plaintiffs seek compensation for the inability to use payment cards, lost time, and other out-of-pocket expenses associated with the breach. Id. ¶¶ 9–12.

In December 2017, hackers breached Brinker’s back office systems through a vulnerable access point earlier identified in an informal risk assessment conducted by Brinker. (Doc. 131-3 ¶ 7). In March 2018, using the previously breached access point, hackers placed malware on Brinker’s

systems. Id. Between March 2018 and April 2018, hackers stole both customer payment card data and personally identifiable information. (Doc. 131 at 1–2). This will hereafter be referred to as “the Data Breach.” Different Chili’s restaurants were affected at different times. (Doc. 141 at 13). In May 2018,

Brinker was notified that “card data had been leaked from their corporate- owned Chili’s restaurants and sold on Joker Stash, a known marketplace for stolen payment card data.” (Docs. 95 ¶ 2; 146-6 at 8). Plaintiffs represent that all of the up to 4.5 million cards stolen from Brinker were found on Joker Stash.

(Doc. 165 at 26:6–12, 27:4–9). Shenika Theus is a resident of Texas, where she used her payment card on or about March 31, 2018 at a Chili’s in Garland, Texas. (Doc. 95 ¶¶ 17, 31). Theus incurred five unauthorized charges on her account, after which she

contacted her bank, cancelled her card, and disputed the charges. Id. ¶ 32. Theus was also charged a fee “when her account had insufficient funds to satisfy a [utility] bill.” (Doc. 141 at 16). Michael Franklin is a resident of California, where he used his payment card to make two separate purchases at Chili’s restaurants: once on March 17,

2018 in Carson, California and again on April 22, 2018 in Lakewood, California. (Doc. 95 ¶¶ 18, 36). Franklin incurred two unauthorized charges on his account, after which he cancelled his card, spent between five and six hours speaking to bank representatives, and visited the Chili’s locations to request receipts.

Id. ¶¶ 37–40. Eric Steinmetz is a resident of Nevada, where he used his payment card on or about April 4, 2018 at a Chili’s in North Las Vegas, Nevada. Id. ¶¶ 19, 42. Steinmetz spent time speaking with the Chili’s location, Chili’s national office,

credit reporting agencies, and his bank. Id. ¶¶ 43–44. B. Procedural Posture Plaintiffs filed suit on May 24, 2018 (Doc. 1), after which the Court consolidated two related cases on October 30, 2018 (Doc. 31). Plaintiffs filed a

Second Amended Consolidated Class Action Complaint (Doc. 39), which Brinker moved to dismiss (Doc. 48). The Court issued an order holding that all Plaintiffs had standing except those alleging only future injuries. (Doc. 65 at 15–18). The Court also requested briefing on choice of law and deferred ruling on Brinker’s

Rule 12(b)(6) motion. Id. at 19–20. The parties submitted a Joint Notice of Choice of Law Briefing Preference, but the parties were unable to agree on what law governed. (Doc. 68). The Court then issued an order granting in part and denying in part Brinker’s Rule 12(b)(6) motion to dismiss. (Doc. 92). Plaintiffs filed a Third Amended Complaint (Doc. 95), and Brinker moved

to dismiss the new claims and Plaintiffs’ requests for injunctive relief (Doc. 99). The Court dismissed the new claims and again affirmed that Plaintiffs had standing but held that any future injuries were too speculative; thus, the Court dismissed any requests for injunctive relief. (Doc. 122 at 10–11). The surviving

claims include (1) breach of implied contract, (2) negligence, (3) violation of California’s Unfair Competition Law (“UCL”) Unlawful Business Practices (for alleged violations of the FTC Act and California Civil Code § 1798.81.5), and (4) violation of California’s UCL Unfair Business Practices. (Doc. 92 at 6–7, 59–60).

This case is now before the Court on Plaintiffs’ Motion for Class Certification (Doc. 131) and Brinker’s Motion to Exclude Expert Opinions and Testimony of Daniel J. Korczyk (Doc. 142). On February 25, 2021, the Court held a hearing on the motions, the record of which is incorporated herein. (Doc.

165). Plaintiffs seek to certify two classes: (1) a Nationwide Class for the breach of implied contract and negligence claims and (2) a California Statewide Class for the California consumer protection claims. (Doc. 131 at 1). Because Brinker’s Motion to Exclude Expert Opinions and Testimony is critical to Plaintiffs’

Motion for Class Certification, the Court will begin its discussion there. II. DAUBERT MOTION Plaintiffs’ expert, Daniel J. Korczyk, is offered to show that a common method of calculating class members’ damages exists for purposes of predominance under Federal Rule of Civil Procedure 23(b)(3). (Doc. 132-1 ¶ 16).

Brinker filed a Daubert motion to exclude Korczyk’s testimony (Doc. 142), to which Plaintiffs responded (Doc. 152), and Brinker replied (Doc. 154). Under Federal Rule of Evidence 702, an expert witness may testify if (1) the expert’s “specialized knowledge will help the trier of fact to understand the

evidence or to determine a fact in issue;” (2) “the testimony is based on sufficient facts or data;” (3) “the testimony is the product of reliable principles and methods;” and, (4) “the expert has reliably applied the principles and methods to the facts of the case.” The party offering the expert witness carries the burden

of proof to satisfy the elements by a preponderance of the evidence. Rink v. Cheminova, Inc., 400 F.3d 1286, 1292 (11th Cir. 2005). District courts serve as gatekeepers to ensure juries hear only reliable and relevant information. See Daubert v. Merrell Dow Pharm., Inc., 509 U.S. 579, 597 (1993). However,

exclusion is not done lightly: “[v]igorous cross-examination, presentation of contrary evidence, and careful instruction on the burden of proof are the traditional and appropriate means of attacking shaky but admissible [expert] evidence.” Daubert, 509 U.S. at 596.

Korczyk graduated from Notre Dame and has a Master of Finance from DePaul University. (Doc. 132-1 ¶ 2). Korczyk is a Certified Public Accountant and holds several accreditations including one in business valuations and another in financial forensics from the American Institute of Certified Public Accountants. Id. Korczyk has almost forty years’ experience in public

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Prado-Steiman Ex Rel. Prado v. Bush
221 F.3d 1266 (Eleventh Circuit, 2000)
Charles J. Piazza, Jr. v. EBSCO Industries, Inc.
273 F.3d 1341 (Eleventh Circuit, 2001)
Green Leaf Nursery v. E.I. DuPont De Nemours & Co.
341 F.3d 1292 (Eleventh Circuit, 2003)
Valley Drug Co. v. Geneva Pharmaceuticals, Inc.
350 F.3d 1181 (Eleventh Circuit, 2003)
Leonard J. Klay v. Humana, Inc.
382 F.3d 1241 (Eleventh Circuit, 2004)
Rink v. Cheminova, Inc.
400 F.3d 1286 (Eleventh Circuit, 2005)
Vega v. T-MOBILE USA, INC.
564 F.3d 1256 (Eleventh Circuit, 2009)
East Texas Motor Freight System, Inc. v. Rodriguez
431 U.S. 395 (Supreme Court, 1977)
General Telephone Co. of Southwest v. Falcon
457 U.S. 147 (Supreme Court, 1982)
Lujan v. Defenders of Wildlife
504 U.S. 555 (Supreme Court, 1992)
Daubert v. Merrell Dow Pharmaceuticals, Inc.
509 U.S. 579 (Supreme Court, 1993)
Amchem Products, Inc. v. Windsor
521 U.S. 591 (Supreme Court, 1997)
Bridge v. Phoenix Bond & Indemnity Co.
553 U.S. 639 (Supreme Court, 2008)
Wal-Mart Stores, Inc. v. Dukes
131 S. Ct. 2541 (Supreme Court, 2011)
Exxon Mobil Corp. v. Allapattah Services, Inc.
545 U.S. 546 (Supreme Court, 2005)

Cite This Page — Counsel Stack

Bluebook (online)
In re: Brinker Data Incident Litigation, Counsel Stack Legal Research, https://law.counselstack.com/opinion/in-re-brinker-data-incident-litigation-flmd-2021.