Morrison v. Entrust Corporation

CourtDistrict Court, D. Minnesota
DecidedMay 14, 2024
Docket0:23-cv-00415
StatusUnknown

This text of Morrison v. Entrust Corporation (Morrison v. Entrust Corporation) is published on Counsel Stack Legal Research, covering District Court, D. Minnesota primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Morrison v. Entrust Corporation, (mnd 2024).

Opinion

UNITED STATES DISTRICT COURT DISTRICT OF MINNESOTA

James Morrison, on behalf of himself and all File No. 23-cv-415 (ECT/ECW) others similarly situated,

Plaintiff,

v. OPINION AND ORDER

Entrust Corporation, and Entrust MN Corporation,

Defendants. ________________________________________________________________________ Brittany N. Resch and Raina Borrelli, Strauss Borrelli PLLC, Chicago, IL, for Plaintiff James Morrison.

Leslie Kostyshak and Neil K. Gilman, Hunton Andrews Kurth LLP, Washington, D.C., and Robert E. Cattanach and Roxanna Gonzalez, Dorsey & Whitney LLP, Minneapolis, MN, for Defendants Entrust Corporation and Entrust MN Corporation.

Plaintiff James Morrison has filed an Unopposed Motion for Final Approval of Class Action Settlement, ECF No. 46, and an Unopposed Motion for Award of Attorneys’ Fees, Litigation Costs, and Service Awards, ECF No. 39. As required by Federal Rule of Civil Procedure 23(e)(2), a hearing on these motions was held April 4, 2024. The motions will be granted. Plaintiff’s submissions and other materials in the case file establish: (1) that class certification is appropriate under Rules 23(a) and 23(b)(3); (2) that the proposed settlement is fair, reasonable, and adequate under Rule 23(e)(2); and (3) that the requested attorneys’ fees and class-representative payment are reasonable. I Relevant Background Facts and Procedural History This case concerns a data security breach. The Complaint alleges several basic facts

regarding the breach. Entrust1 is a cybersecurity vendor providing services including securing transactions, identities, and data to various businesses and government entities. Compl. ¶ 1. Plaintiff and members of the conditionally certified class were Entrust employees who were required to provide—and provided—private information to Entrust to receive employment and compensation. Id. ¶¶ 20, 128–31. On June 18, 2022, Entrust

discovered it had been subjected to a ransomware attack that targeted Entrust’s back-office system; Entrust subsequently determined that an unauthorized criminal third party had accessed Entrust’s systems and exfiltrated certain employee data. Id. ¶¶ 36, 38. A ransomware gang claimed responsibility for the cyberattack and released information from the breach to a data leak page in August 2022. Id. ¶ 37. Entrust began notifying its clients

of the Data Incident in December 2022. Id. ¶ 39. In this case, Plaintiff’s core allegation is that Entrust failed to adequately safeguard electronically stored private information in connection with the data security incident announced by Entrust in December 2022, and Plaintiff brings five claims: negligence; negligence per se; declaratory judgment; breach of implied contract; and unjust

enrichment. See id. ¶¶ 95–150. Plaintiff sought an award of actual, compensatory, and statutory damages as well as attorneys’ fees and costs, and any such further relief as may

1 Plaintiff refers to Defendants Entrust Corporation and Entrust MN Corporation collectively as “Entrust,” and that convention will be followed here. be deemed just and proper on his own behalf and on behalf of a proposed class. See id. at 34–38. Plaintiff alleged the presence of subject-matter jurisdiction under the Class Action Fairness Act, 28 U.S.C. § 1332(d)(2). Id. ¶ 15.

No doubt Defendants dispute these allegations and claims, certainly to the extent they might be construed to generate liability or damages.2 On April 17, 2023, Defendants filed a Rule 12(b)(6) motion to dismiss Plaintiff’s Complaint. ECF No. 15. In support of this motion, Defendants argued, among other things, that Plaintiff had not alleged facts plausibly showing that he suffered damages, an essential element of his negligence and

breach-of-contract claims. ECF No. 18 at 6–10. Defendants argued that Plaintiff also had failed to allege facts showing Defendants breached a duty for purposes of his negligence claim. Id. at 10–11. Defendants argued that the federal statutes on which Plaintiff grounded his negligence per se claim provided no legal basis for the claim. Id. at 11–14. And Defendants challenged the factual and legal bases underlying Plaintiff’s implied-

contract and unjust-enrichment claims. Id. at 14–19. Plaintiff responded to Defendant’s Rule 12(b)(6) motion in an opposition brief filed May 19, 2023. ECF No. 20. Soon after Plaintiff filed his opposition brief—on June 1, 2023—the parties participated in a mediation and reached agreement on material settlement terms. ECF No. 21 ¶ 5. The parties evidently reached agreement on all settlement terms on June 7. Id. ¶ 6.

2 The parties have made clear that the proposed settlement does not constitute an admission of liability by Defendants. To be clear, the Court notes expressly that, as part of this order, it does not find liability or wrongdoing by Defendants. On November 30, 2023, District Judge Wilhelmina M. Wright entered an order granting preliminary approval of the proposed class action settlement. ECF No. 35. In this preliminary approval order, Judge Wright: (a) conditionally certified this matter as a class

action, including defining the class and class claims, id. ¶ 4; (b) appointed Plaintiff as the class representative and appointed Raina Borrelli, then of the law firm Turke & Strauss LLP, as class counsel, id. ¶ 10; (c) preliminarily approved the settlement agreement, id. ¶ 1; (d) approved the form and manner of notice to the settlement class, id. ¶ 6; (e) set deadlines for opt-outs and objections, id. ¶ 8; (f) approved and appointed the settlement

administrator, id. ¶ 11; and (g) set the date for the final fairness hearing, id. ¶ 2. On January 12, 2024, pursuant to the notice requirements set forth in the settlement agreement and in the November 30 preliminary approval order, the conditionally certified settlement class was notified of the terms of the proposed settlement agreement, of the right of settlement class members to opt-out, and the right of settlement class members to object

to the settlement agreement and to be heard at the final fairness hearing. ECF No. 49 ¶¶ 7– 8; ECF No. 49-1. On April 4, 2024, a final fairness hearing was held to determine, among other matters: (1) whether the conditionally certified settlement class should be certified; (2) whether the terms and conditions of the settlement agreement are fair, reasonable, and

adequate for the release of the claims contemplated by the settlement agreement; (3) whether the requested attorneys’ fees and class-representative payment are reasonable; and (4) whether judgment should be entered dismissing this action with prejudice. ECF No. 55. Prior to the final fairness hearing, a declaration of compliance with the provisions of the settlement agreement and preliminary approval order relating to notice was filed with the Court. ECF No. 49. The record establishes that settlement class members were properly notified of their right to appear at the final fairness hearing in support of or in

opposition to the proposed settlement agreement, the award of attorneys’ fees, costs, and expenses to class counsel, and the payment of a service award to the class representative. As of the deadline for objections, no settlement class member had filed an objection. “The threshold issue is whether the settlement class satisfies the requirements of Federal Rule of Civil Procedure 23(a) and at least one prong of Rule 23(b). Upon

determining that the class satisfies Rule 23, the Court will then analyze the Settlement itself, as well as any relevant objections.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Boeing Co. v. Van Gemert
444 U.S. 472 (Supreme Court, 1980)
General Telephone Co. of Southwest v. Falcon
457 U.S. 147 (Supreme Court, 1982)
Amchem Products, Inc. v. Windsor
521 U.S. 591 (Supreme Court, 1997)
Rattray v. Woodbury County, IA
614 F.3d 831 (Eighth Circuit, 2010)
Wal-Mart Stores, Inc. v. Dukes
131 S. Ct. 2541 (Supreme Court, 2011)
Petrovic v. Amoco Oil Co.
200 F.3d 1140 (Eighth Circuit, 1999)
Comcast Corp. v. Behrend
133 S. Ct. 1426 (Supreme Court, 2013)
Oscar Ortega v. Uponor, Inc.
716 F.3d 1057 (Eighth Circuit, 2013)
Laura Powers v. Credit Management Services, In
776 F.3d 567 (Eighth Circuit, 2015)
Jim Sciaroni v. Target Corporation
847 F.3d 608 (Eighth Circuit, 2017)
Edward Huyer v. Steven Buckley
849 F.3d 395 (Eighth Circuit, 2017)
Erin Caligiuri v. Symantec Corp.
855 F.3d 860 (Eighth Circuit, 2017)
Lorence v. U.S. Bank National Ass'n
291 F.3d 1035 (Eighth Circuit, 2002)
Vizena v. Union Pacific Railroad
360 F.3d 496 (Fifth Circuit, 2004)

Cite This Page — Counsel Stack

Bluebook (online)
Morrison v. Entrust Corporation, Counsel Stack Legal Research, https://law.counselstack.com/opinion/morrison-v-entrust-corporation-mnd-2024.