Schwartz v. ADP, LLC.

District Court, M.D. Florida·Decided December 3, 2021·No. 2:21-cv-00283·Unknown

Opinion

UNITED STATES DISTRICT COURT MIDDLE DISTRICT OF FLORIDA FORT MYERS DIVISION

DAVID SCHWARTZ,

Plaintiff,

v. Case No: 2:21-cv-283-SPC-MRM

ADP, INC. and AUTOMATIC DATA PROCESSING, INC.,

Defendants. / OPINION AND ORDER1 Before the Court is Defendants ADP, Inc. and Automatic Data Processing, Inc.’s (together “ADP”) Motion to Dismiss (Doc. 55). Plaintiff David Schwartz responded (Doc. 56). The Court grants the Motion in part. BACKGROUND This case arises from Schwartz’s job with ADP. A few years ago, their relationship went awry. Schwartz alleges ADP has illegal business practices. After he blew the whistle on them, ADP retaliated. They locked him out of his work laptop and iPad, then fired him.

1 Disclaimer: Documents hyperlinked to CM/ECF are subject to PACER fees. By using hyperlinks, the Court does not endorse, recommend, approve, or guarantee any third parties or the services or products they provide, nor does it have any agreements with them. The Court is also not responsible for a hyperlink’s availability and functionality, and a failed hyperlink does not affect this Order. Later, ADP sued Schwartz in state court for breach of contract and taking trade secrets. Schwartz counterclaimed for wrongful termination. ADP

followed with another state action for defamation. Those cases are pending. When the state-court litigation got publicity, ADP hacked into Schwartz’s electronic communications and accounts. Now, in federal court, Schwartz brings a host of claims. The operative pleading is the Third Amended

Complaint (the “Complaint”) (Doc. 50). LEGAL STANDARD A complaint must recite “a short and plain statement of the claim showing that the pleader is entitled to relief.” Fed. R. Civ. P. 8(a)(2). “To

survive a motion to dismiss, a complaint must contain sufficient factual matter, accepted as true, to ‘state a claim to relief that is plausible on its face.’” Ashcroft v. Iqbal, 556 U.S. 662, 678 (2009) (quoting Bell Atl. Corp. v. Twombly, 550 U.S. 544, 570 (2007)). A facially plausible claim allows a “court to draw

the reasonable inference that the defendant is liable for the misconduct alleged.” Id. Courts must accept all well-pled allegations as true and view them most favorably to plaintiff. Almanza v. United Airlines, Inc., 851 F.3d 1060, 1066 (11th Cir. 2017).

DISCUSSION The parties’ dispute proceeds in five parts below. A. Counts 1 and 7 First, ADP says Schwartz did not state claims under the Computer

Fraud and Abuse Act (“CFAA”). Schwartz responds ADP’s “sole argument” revolves around failing to specify what devices it hacked. (Doc. 56 at 3). That’s wrong. ADP moves to dismiss for several reasons, including the failure to allege proper damages. Even assuming Schwartz clarified the devices, the

Court agrees with ADP on the damages element. The CFAA punishes computer hacking. Fla. Atl. Univ. Bd. of Trs. v. Parsont, 465 F. Supp. 3d 1279, 1290 (S.D. Fla. 2020). Its civil enforcement remedy “has four elements: (1) a defendant intentionally accessed a protected

computer; (2) without authorization or exceeding authorized access; and the defendant (3) thereby obtained information; and (4) the plaintiff suffered damage or loss of at least $5,000.”2 Hall v. Sargeant, No. 18-80748-CIV- ALTMAN/Reinhart, 2020 WL 1536435, at *28 (S.D. Fla. Mar. 30, 2020); see

also Hamilton Grp. Funding, Inc. v. Basel, 311 F. Supp. 3d 1307, 1313 (S.D. Fla. 2018) (parsing dense statute to cobble together this claim). To meet the statutory minimum, damages must satisfy the definition of “loss.” Brown Jordan Int’l, Inc. v. Carmicle, 846 F.3d 1167, 1173 (11th Cir. 2017); 18 U.S.C.

§ 1030(c)(4)(A)(i)(I).

2 But see Register.com, Inc. v. Verio, Inc., 356 F.3d 393, 439-40 (2d Cir. 2004) (explaining “damage” is not relevant to some CFAA claims). The CFAA recognizes two losses: any reasonable cost to any victim, including the cost of responding to an offense, conducting a damage assessment, and restoring the data, program, system, or information to its condition prior to the offense, and any revenue lost, cost incurred, or other consequential damages incurred because of interruption of service.

18 U.S.C. § 1030(e)(11) (emphasis added). So the CFAA allows recovery of (1) “direct costs of responding to the violation” and (2) “consequential damages resulting from interruption of service.” Carmicle, 846 F.3d at 1174. At bottom, some combination of those losses must meet the $5,000 minimum. Id. at 1173. ADP is correct the Complaint only makes the conclusory allegation losses reached that amount. While Schwartz alleges ADP hacked attorney-client communications and personal information valued at over $5,000, those are not “losses” under the CFAA. Daughtry v. Atlanta Crane & Automated Handling, Inc., No. 2:10-cv-1371-AKK, 2012 WL 13024455, at *8 (N.D. Ala. Jan. 12, 2012) (“The CFAA’s definition of ‘loss’ does not include lost revenue from the possible misappropriation of ‘stolen’ information.”); Aquent LLC v. Stapleton, 65 F. Supp. 3d 1339, 1345 (M.D. Fla. 2014). Again, losses are the costs associated

with remedying a CFAA violation and consequential damages from lost service. Carmicle, 846 F.3d at 1174; 18 U.S.C. § 1030(e)(11). Yet Schwartz offers no facts from which anyone could infer he suffered $5,000 of those losses. With just conclusory allegations on the damages element, the claim must fail. Oce N. Am., Inc. v. MCS Servs., Inc., 748 F. Supp. 2d 481, 488 (D. Md. 2010); Psychas v. Dist. Dep’t of Transp., No. 18-0081 (ABJ), 2019 WL 4644503, at *8-

11 (D.D.C. Sept. 24, 2019) (surveying cases and explaining limitations on “losses”).3 So the Court dismisses the CFAA claims. B. Counts 4 and 10

Second, ADP seeks to dismiss both claims under the Consolidated Omnibus Budget Reconciliation Act (“COBRA”), which amended the Employee Retirement Income Security Act (“ERISA”). According to Schwartz, ADP did not give him notice of his right to coverage. Without knowing about COBRA

benefits, his family lost their insurance. So Schwartz and his wife decided not to have a second child. Like before, the Court concludes he doesn’t have standing.4 (Doc. 36) (the “Order”).

3 See also Fla. Beauty Flora Inc. v. Pro Intermodal L.L.C., No. 20-20966-CIV- ALTONAGA/Goodman, 2020 WL 4003494, at *7 (S.D. Fla. July 15, 2020); New S. Equip. Mats, LLC v. Keener, 989 F. Supp. 2d 522, 531 (S.D. Miss. 2013); Quantlab Techs. Ltd. (BVI) v. Godlevsky, 719 F. Supp. 2d 766, 776 (S.D. Tex. 2010); Sartori v. Schrodt, 424 F. Supp. 3d 1121, 1129 (N.D. Fla. 2019); CareersUSA, Inc. v. Guerrero, No. 14-80096-Civ-Scola, 2014 WL 12862259, at *3 (S.D. Fla. Aug. 25, 2014); Raju v. Murphy, No. 3:17-CV-357-CWR-FKB, 2019 WL 982863, at *8 (S.D. Miss. Feb. 28, 2019); Andersen v. Fenn, No. 1:20-cv-00553-JFR, 2020 WL 11626069, at *1 (D.N.M. Sept. 25, 2020); Bashaw v. Johnson, No. 11-2693-JWL, 2012 WL 1623483, at *3 (D. Kan. May 9, 2012); Complete Logistical Servs., LLC v. Rulh, 350 F. Supp. 3d 512, 522 (E.D. La. 2018).

4 In this context, the term “standing” is somewhat misleading.

Free access — add to your briefcase to read the full text and ask questions with AI

Schwartz v. ADP, LLC., (M.D. Fla. 2021).

Schwartz v. ADP, LLC. (Schwartz v. ADP, LLC.) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Long v. Satz
181 F.3d 1275 (Eleventh Circuit, 1999)
United States v. Charles M. McInteer
470 F.3d 1350 (Eleventh Circuit, 2006)
Geissal v. Moore Medical Corp.
524 U.S. 74 (Supreme Court, 1998)
Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Ashcroft v. Iqbal
556 U.S. 662 (Supreme Court, 2009)
James F. Mullins v. Pfizer, Inc.
23 F.3d 663 (Second Circuit, 1994)
register.com, Inc. v. Verio, Inc.
356 F.3d 393 (Second Circuit, 2004)
Tampa Bay Water v. HDR Engineering, Inc.
731 F.3d 1171 (Eleventh Circuit, 2013)
Vaughn v. Bay Environmental Management, Inc.
567 F.3d 1021 (Ninth Circuit, 2009)
Bridges v. American Elec. Power Co., Inc.
498 F.3d 442 (Sixth Circuit, 2007)
Orth v. Wisconsin State Employees Union, Council 24
546 F.3d 868 (Seventh Circuit, 2008)
Kelly v. Palmer, Reifler, & Associates, P.A.
681 F. Supp. 2d 1356 (S.D. Florida, 2010)
Quantlab Technologies Ltd.(BVI) v. Godlevsky
719 F. Supp. 2d 766 (S.D. Texas, 2010)
Lexmark Int'l, Inc. v. Static Control Components, Inc.
134 S. Ct. 1377 (Supreme Court, 2014)
W.A. Griffin, MD v. Southern Company Services, Inc.
635 F. App'x 789 (Eleventh Circuit, 2015)
Geri Siano Carriuolo v. General Motors Company
823 F.3d 977 (Eleventh Circuit, 2016)
Brown Jordan International, Inc. v. Christopher Carmicle
846 F.3d 1167 (Eleventh Circuit, 2017)
CSX Transportation, Inc. v. General Mills, Inc.
846 F.3d 1333 (Eleventh Circuit, 2017)