In re: Netgain Technology, LLC, Consumer Data Breach Litigation

CourtDistrict Court, D. Minnesota
DecidedNovember 3, 2025
Docket0:21-cv-01210
StatusUnknown

This text of In re: Netgain Technology, LLC, Consumer Data Breach Litigation (In re: Netgain Technology, LLC, Consumer Data Breach Litigation) is published on Counsel Stack Legal Research, covering District Court, D. Minnesota primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
In re: Netgain Technology, LLC, Consumer Data Breach Litigation, (mnd 2025).

Opinion

UNITED STATES DISTRICT COURT DISTRICT OF MINNESOTA

Court File No. 21-cv-1210 (SRN/LIB)

CLASS ACTION

IN RE: NETGAIN TECHNOLOGY, ORDER GRANTING FINAL LLC, CONSUMER DATA BREACH APPROVAL OF CLASS ACTION LITIGATION SETTLEMENT, CERTIFICATION OF SETTLEMENT CLASS, AND ORDER FOR JUDGMENT

SUSAN RICHARD NELSON, U.S. District Judge This matter came before the undersigned on October 30, 2025 for a Final Fairness Hearing and on Plaintiffs’ unopposed Motion for Final Approval of Class Action Settlement [Doc. No. 137] (“Motion for Final Approval”). Plaintiffs Misty Meier (o.b.o. her minor child G.C-M.), Jane Doe, Susan M. Reichert, Robert Smithburg, Thomas Lindsay, and Robin Guertin (collectively “Named Plaintiffs”), appeared through their attorneys, Kate Baxter-Kauf, Christopher Renz, and Brian Gudmundson (referred to collectively herein as “Class Counsel”). Defendant Netgain Technology, LLC (“Netgain”) appeared through its counsel, Henry Pfutzenreuter. On May 19, 2025, the undersigned preliminarily approved a settlement between the Named Plaintiffs and the Defendant Netgain [Doc. No. 131] (the “Preliminary Approval Order”). In the Preliminary Approval Order, the Court provisionally certified a class for settlement purposes (the “Settlement Class”), directed that the parties send notice to the potential Settlement Class members, appointed a Settlement Administrator, appointed representative plaintiffs, and appointed class counsel. In their Motion for Final Approval, Named Plaintiffs request that the Court formally certify the Settlement Class and determine that the notice provided to the Settlement Class members and the Settlement itself meet the

requirements for settlement of a class action under Fed. R. Civ. P. 23. Class Counsel has separately moved for approval and payment of their attorneys’ fees and expenses, as well as for service awards for the Named Plaintiffs [Doc. No. 132] (the “Fee Petition”), which the Court will address by separate order. Now, based upon the entire record in this case, and arguments of counsel, the Court grants Plaintiff’s Motion for Final Approval, certifies the Settlement Class, and finds the Settlement fair, adequate, and reasonable.

I. FINDINGS OF FACT AND CONCLUSIONS OF LAW A. The Litigation. Netgain is a “service provider” who externally manages IT and cloud computing services for companies primarily in the healthcare and accounting industries.1 (Baxter- Kauf Decl., Ex. A (Settlement Agreement) [Doc. No. 140-1] (“SA”) at 1.) Netgain provides

a variety of IT-related services to clients, including cloud computing, technical infrastructure, IT management, and service and application management. (Id.) In September and November of 2020, criminals illegally accessed information stored by certain customers on Netgain servers (the “Breach”). (Id.) In early 2021, Netgain began notifying clients of the Breach. (Compl. [Doc. No. 1] ¶¶ 18–19.)

As a result of the Breach, personal information of individuals—customers of Netgain’s clients—was exfiltrated by the hackers. This information included data which,

1 The facts as presented in the Settlement Agreement were agreed to for the purposes of settlement only. either on its own or with other information, could be used to identify, locate, or contact a person, and included, without limitation, names, email addresses, phone numbers, home

addresses, dates of birth, Social Security number (SSNs), drivers’ license information, tax records, bank account and routing information, and other personal identifying information, as well as information used to process health insurance claims, prescription information, medical records and data, and other personal health information (“Personal Identifying Information” or “PII”). In the summer of 2021, several Named Plaintiffs filed separate lawsuits [Doc. No.

1] and later filed a joint motion to consolidate the cases, which the Court granted on August 24, 2021 [Doc. No. 34] (collectively, these lawsuits are referred to herein as the “Action”). The Court retitled this consolidated Action as In re: Netgain Technology, LLC Consumer Data Breach Litigation. (Id.) Plaintiffs then filed an amended complaint combining their claims into one consolidated complaint (the “Consolidated Class Action Complaint”) [Doc.

No. 35]. Plaintiffs’ Consolidated Class Action Complaint asserts claims for negligence, negligence per se, violations of the California Consumer Privacy Act, violations of the California Unfair Competition Law, violations of the Minnesota Health Records Act (“MHRA”), and for declaratory relief, and seeks remedies including damages and injunctive relief for the impact and harm alleged to be caused by the Breach.

Initially, Defendant filed a motion to dismiss arguing that Plaintiffs lacked Article III standing and that their complaint failed to adequately state claims for negligence, negligence per se, violation of the MHRA, and for declaratory and injunctive relief. [Doc. No. 45.] The Court granted the motion in part and denied the motion in part. [Doc. No. 56.] The Court dismissed Plaintiffs’ negligence per se claim and claim for violation of the MHRA. (Id.) The parties then engaged in discovery.

B. Settlement Negotiations The Parties participated in multiple mediated settlement negotiations before the Honorable Jeffrey J. Keyes (Ret.) of Keyes ADR. (Baxter-Kauf Decl. [Doc. No. 140] ¶ 3.) As a result of these negotiations, the Parties were able to reach a final Settlement Agreement, which is now before the Court. (Id.) Based on the uncontroverted evidence, the Settlement Agreement was negotiated in good-faith and at arms-length.

C. The Terms of the Settlement. Under the Settlement, Defendant agrees to pay a total of $1,900,000 into a non- reversionary fund that cannot be reclaimed by Defendant (the “Settlement Fund”). (SA ¶¶ 1.46, 4.) One primary driver of this settlement is Defendant’s financial state as represented by Netgain’s attorneys. (SA at 2, ¶ 3.) Plaintiffs were provided access to financial information from Netgain to assess the veracity of these claims. (SA ¶ 3.)

Each Class Member will be able to submit a claim for a documented monetary loss incurred by the Class Member as defined in the Settlement Agreement (a “Documented Loss”), for time spent in a manner defined in the Settlement Agreement (“Lost Time”), or for cash payment. (SA ¶ 4.2.) A Class Member will be able to claim either the cash payment or reimbursement (for a Documented Loss and/or Lost Time). (Id.) The maximum amount

a Class Member can recover for Documented Loss and/or Lost Time is $5,000.00. (Id.) After claims for Documented Losses or Lost Time (if approved by the Administrator) are calculated, the remaining amount of money in the Settlement Fund will be distributed pro rata to the claimants who made claims for cash payments. (Id.)

Defendant also agreed to injunctive relief for a period of three years after the effective date of the Settlement Agreement. (SA ¶ 2.1.) This provision requires that Netgain adopt, continue, or implement: upgrading firewalls, routing through secured gateways, geo-blocking, ensuring its network is configured in a secure and scaleable manner, deploying virus prevention technology across Netgain’s data environment, utilizing multi- factor authentication in hosting environments, and backing up data protection. (Id.) Class

Counsel will be able to verify that Netgain is employing these measures during this three- year period. (Id.) In exchange for the benefits conferred on the Class Members, the Named Plaintiffs and Class Members who do not timely exclude themselves from the settlement by filing a Request for Exclusion prior to the expiration of the Opt-Out Period will be deemed to

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Williams v. Mohawk Industries, Inc.
568 F.3d 1350 (Eleventh Circuit, 2009)
Mullane v. Central Hanover Bank & Trust Co.
339 U.S. 306 (Supreme Court, 1950)
Eisen v. Carlisle & Jacquelin
417 U.S. 156 (Supreme Court, 1974)
Carson v. American Brands, Inc.
450 U.S. 79 (Supreme Court, 1981)
Amchem Products, Inc. v. Windsor
521 U.S. 591 (Supreme Court, 1997)
Wal-Mart Stores, Inc. v. Dukes
131 S. Ct. 2541 (Supreme Court, 2011)
Petrovic v. Amoco Oil Co.
200 F.3d 1140 (Eighth Circuit, 1999)
Buchet v. ITT Consumer Financial Corp.
845 F. Supp. 684 (D. Minnesota, 1994)
Holden v. Burlington Northern, Inc.
665 F. Supp. 1398 (D. Minnesota, 1987)
Heller v. Schwan's Sales Enterprises, Inc.
548 N.W.2d 287 (Court of Appeals of Minnesota, 1996)
White v. National Football League
822 F. Supp. 1389 (D. Minnesota, 1993)
Tyson Foods, Inc. v. Bouaphakeo
577 U.S. 442 (Supreme Court, 2016)
Jim Sciaroni v. Target Corporation
847 F.3d 608 (Eighth Circuit, 2017)
Jim Sciaroni v. Target Corporation
855 F.3d 913 (Eighth Circuit, 2017)
Riley Johannessohn v. Polaris Industries Inc.
9 F.4th 981 (Eighth Circuit, 2021)
Marshall v. National Football League
787 F.3d 502 (Eighth Circuit, 2015)
Buchet v. ITT Consumer Financial Corp.
858 F. Supp. 944 (D. Minnesota, 1994)
Schmidt v. Fuller Brush Co.
527 F.2d 532 (Eighth Circuit, 1975)

Cite This Page — Counsel Stack

Bluebook (online)
In re: Netgain Technology, LLC, Consumer Data Breach Litigation, Counsel Stack Legal Research, https://law.counselstack.com/opinion/in-re-netgain-technology-llc-consumer-data-breach-litigation-mnd-2025.