ORTHMAN v. PREMIERE PEDIATRICS

2024 OK CIV APP 7
CourtCourt of Civil Appeals of Oklahoma
DecidedJanuary 5, 2024
Docket2024 OK CIV APP 7
StatusPublished

This text of 2024 OK CIV APP 7 (ORTHMAN v. PREMIERE PEDIATRICS) is published on Counsel Stack Legal Research, covering Court of Civil Appeals of Oklahoma primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
ORTHMAN v. PREMIERE PEDIATRICS, 2024 OK CIV APP 7 (Okla. Ct. App. 2024).

Opinion

OSCN Found Document:ORTHMAN v. PREMIERE PEDIATRICS
  1. Previous Case
  2. Top Of Index
  3. This Point in Index
  4. Citationize
  5. Next Case
  6. Print Only

ORTHMAN v. PREMIERE PEDIATRICS
2024 OK CIV APP 7
Case Number: 121682
Decided: 01/05/2024
Mandate Issued: 02/01/2024
DIVISION III
THE COURT OF CIVIL APPEALS OF THE STATE OF OKLAHOMA, DIVISION III


Cite as: 2024 OK CIV APP 7, __ P.3d __

MICHAEL ORTHMAN, on his own behalf and on behalf of his minor children L.O. and K.O. and on behalf of all similarly situated persons, Plaintiffs/Appellants,
v.
PREMIERE PEDIATRICS, PLLC, Defendant/Appellee,

APPEAL FROM THE DISTRICT COURT OF
CLEVELAND COUNTY, OKLAHOMA

HONORABLE MICHAEL D. TUPPER, TRIAL JUDGE

AFFIRMED IN PART, REVERSED IN PART

William B. Federman, Tanner R. Hilton, FEDERMAN & SHERWOOD, Oklahoma City, Oklahoma, for Plaintiffs/Appellants,

Curtis J. Dewberry, DEWBERRY & HUBBARD, PLC, Oklahoma City, Oklahoma, for Defendant/Appellee.

THOMAS E. PRINCE, PRESIDING JUDGE:

¶1 The Plaintiffs' claims stem from an alleged cyberattack by unknown persons on a third-party healthcare technology company, Connexin Software, Inc., which allegedly manages the electronic health records and patient data analytics of the Defendant, Premiere Pediatrics, PLLC. The trial court dismissed the Petition, with prejudice, for both a lack of standing and for failure to state a claim upon which relief may be granted based primarily on the trial court's view that the Plaintiffs had not plead "concrete injuries-in-fact." We reverse in part and affirm in part. More specifically, we find that, as a matter of law, it was error for the trial court to dismiss the Petition based on an alleged lack of standing. We also find that, in light of the foundational principle of "notice pleading" that is firmly rooted in Oklahoma jurisprudence, it was error for the trial court to dismiss the claims for negligence, breach of implied contract, and breach of fiduciary duty based on the finding that, with respect to said claims, Plaintiffs failed to state a claim upon which relief may be granted. We affirm the trial court's dismissal of the remaining claims under 12 O.S. § 2012B(6). We additionally find that it was error for the trial court to not give the Plaintiffs an opportunity to amend the Petition,1 including, but not limited to, their claim for mitigation damages, which are in the nature of the expenses they expect to incur to guard against future or anticipated damages. As plead by the Plaintiffs, their mitigation damages consist of the cost of mitigating against the allegedly heightened and imminent risk of fraud and identity theft they now allegedly face. We find that, as a matter of law, such mitigation damages are not recoverable in the absence of actual past harms incurred by the Plaintiffs and, if so, only in the event the future effect of the injury or loss is shown "with reasonable certainty," not mere conjecture or probability. Thus, the trial court's Order of September 15, 2023, is affirmed, in part, and reversed, in part, and the matter is remanded for further proceedings consistent with this Opinion.

BACKGROUND

¶2 This case is pursued by Michael Orthman, individually, and on behalf of his two minor children, L.O. and K.O. (collectively referred to as "Plaintiffs" or "Orthman"), and as a proposed class action on behalf of all similarly situated persons. The Petition was filed on April 12, 2023, in the District Court of Cleveland County. As alleged in the Petition, there occurred a "massive and preventable cyberattack . . ." on the electronic data stored in the computer network of the technology company that managed and maintained the patient data of Premiere Pediatrics, PLLC. Premiere responded to the Petition with a Special Appearance and Motion to Dismiss on or about May 9, 2023. A timely response and reply were filed by the Parties. The hearing, initially set for July 25, 2023, was continued to September 5, 2023. The trial court subsequently entered its Order of September 15, 2023, granting the Motion on the basis of a lack of standing, under 12 O.S. § 2012(B)(1), and a failure to state a claim for relief, under 12 O.S. § 2012(B)(6). This timely appeal followed.

¶3 Orthman alleges that Orthman's "Personal and Medical Information was maintained in a condition vulnerable to a cyberattack by a third-party healthcare technology company, Connexin Software, Inc. . . . , which provides software solutions to assist medical facilities in managing electronic health records and patient data analytics." Orthman further claims that "[a]rmed with the Private Information accessed in the Data Breach, the data thieves can commit a variety of crimes including, inter alia¸ opening new financial accounts in Plaintiffs' and Class Members' names, taking out loans in Class Members' names, using Class Members' names to obtain medical services . . .". Orthman asserts that "[a]s a result of the Data Breach, Plaintiffs and Class Members have been exposed to heightened and imminent risk of fraud and identity theft . . . [and] Plaintiffs and Class Members may also incur out of pocket costs for, e.g., purchasing credit monitoring services . . . or other protective measures to deter and detect identity theft."

¶4 It is alleged that Premiere is a pediatric primary care facility providing a variety of services, including well-child exams. It is alleged that on August 26, 2022, Connexin Software, the medical records service provider, employed and negligently supervised by Defendant, detected a data anomaly on its internal network, and on September 13, 2022, confirmed that an unauthorized party was able to access confidential patient data stored on its network. The Plaintiffs further contend that, despite knowing of the Data Breach for more than three (3) months, Premiere did not have Connexin begin notifying Plaintiffs and Class Members until on or around December 2022.

¶5. Regarding damages, Orthman alleged that "Plaintiffs and Class Members now face an increased risk of fraud and identity theft and must deal with that threat forever. Plaintiffs believe their Personal and Medical Information was stolen in the Data Breach and is still in the hands of the hackers. . . .".2 Similar allegations were made multiple times in the Petition.3 On the other hand, Orthman made several generalized claims in various parts of the Petition to the effect that Plaintiffs have "suffered . . . actual harms . . ." and "concrete injury," without providing any detail or by specifically identifying any actual improper use of his personal information or PHI by a hacker, such as to secure a loan or to steal any money.4 One expansive description of the alleged damages that appears to be inclusive of the various injuries that Orthman claims is set out in ¶ 78 (page 25), in part, as follows: "Plaintiffs and the Class have suffered, and continue to suffer, actual harm for which they are entitled to compensation, including . . .

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Wilkerson v. Shinseki
606 F.3d 1256 (Tenth Circuit, 2010)
Krieger v. Marshall
1956 OK 11 (Supreme Court of Oklahoma, 1956)
Jackson v. Williams
1985 OK 103 (Supreme Court of Oklahoma, 1985)
Johnson v. Ward
1975 OK 129 (Supreme Court of Oklahoma, 1975)
Sharp v. 251st Street Landfill, Inc.
1996 OK 109 (Supreme Court of Oklahoma, 1996)
Timmons v. Royal Globe Insurance Co.
1982 OK 97 (Supreme Court of Oklahoma, 1982)
Gilmore v. Enogex, Inc.
878 P.2d 360 (Supreme Court of Oklahoma, 1994)
Hall v. Farmers Insurance Exchange
713 P.2d 1027 (Supreme Court of Oklahoma, 1986)
Wright v. Parks
1997 OK CIV APP 15 (Court of Civil Appeals of Oklahoma, 1997)
Hadnot v. Shaw
1992 OK 21 (Supreme Court of Oklahoma, 1992)
Frazier v. Bryan Memorial Hospital Authority
775 P.2d 281 (Supreme Court of Oklahoma, 1989)
Bryson v. Tillinghast
1988 OK 6 (Supreme Court of Oklahoma, 1988)
White v. McDonald
1968 OK 168 (Supreme Court of Oklahoma, 1968)
Crown Drug Company v. McBride
303 P.2d 970 (Supreme Court of Oklahoma, 1956)
Florafax International Inc. v. GTE Market Resources, Inc.
1997 OK 7 (Supreme Court of Oklahoma, 1997)
Independent School District No. 9 v. Glass
1982 OK 2 (Supreme Court of Oklahoma, 1982)

Cite This Page — Counsel Stack

Bluebook (online)
2024 OK CIV APP 7, Counsel Stack Legal Research, https://law.counselstack.com/opinion/orthman-v-premiere-pediatrics-oklacivapp-2024.