5 UNITED STATES DISTRICT COURT AT SEATTLE 7
CASE NO. 2:23-cv-00755-RSL 9 Plaintiff, v. 10
12 Defendant. 13
14 This matter comes before the Court on the Court’s “Amended Second Order to 15 Show Cause” (Dkt. # 16), plaintiff’s response thereto (Dkt. # 18), defendant’s “Request for 16 Protective Order” (Dkt. # 17), and defendant’s “Verified Emergency Motion for 17 Temporary Restraining Order” (Dkt. # 20). 18 Background 19 In March 2022, plaintiff created a website about his ex-girlfriend, defendant Mahsa 20 Parviz. Plaintiff uses the page to explain how he was duped by Ms. Parviz, asserting that 21 she lied to him about her resume and criminal history and that, despite their break up, she 22 continues to contact him. His avowed purposes in creating the website were to shame 23 and/or expose defendant. In May 2023, Ms. Parviz contacted plaintiff, requesting that he 24 remove the webpage or face a domestic violence complaint filed in the city where he 25 practices law. Plaintiff immediately filed this lawsuit, essentially copying the contents of 26 ORDER OF DISMISSAL - 1 1 the website into a complaint seeking an award of damages (special, general, and punitive), 2 an award of attorney’s fees, and a declaration that Ms. Parviz is a vexatious litigant. The 3 Court issued an order to show cause why the case should not be dismissed for lack of 4 subject matter jurisdiction: plaintiff’s allegation regarding the amount in controversy was 5 wholly conclusory and unsupported by any factual allegations. Plaintiff then filed an 6 amended complaint adding a federal claim under the Computer Fraud and Abuse Act 7 (“CFAA”), 18 U.S.C. § 1030(g), and seeking an injunction against “threated violations of 8 the computer fraud law.” Dkt. # 6 at 21. 9 Sufficiency of Allegations of the First Amended Complaint 10 After reviewing the Verified First Amended Complaint, the Court found that “the 11 newly-added Computer Fraud and Abuse Act claim had not been adequately pled and that 12 ‘the values of judicial economy, convenience, fairness, and comity’ lead to the conclusion 13 that the Court ‘should decline the exercise of jurisdiction [over related state claims] by 14 dismissing the case without prejudice.’” Dkt # 16 at 2 (quoting Carnegie-Mellon Univ. v. 15 Cohill, 484 U.S. 343, 350 (1988) (citation omitted)). Plaintiff was given a second 16 opportunity to show cause why his claims should not be dismissed. 17 The CFAA forbids intentionally accessing a computer without authorization or in 18 excess of the authorized access, 18 U.S.C. § 1030(a), and “is best understood as an anti- 19 intrusion statute and not as a ‘misappropriation statute,’’ hiQ Labs, Inc. v. LinkedIn Corp., 20 31 F.4th 1180, 1196 (9th Cir. 2022) (quoting U.S. v. Nosal, 676 F.3d 854, 857-58 (9th Cir. 21 2012)). In the Ninth Circuit, “a violation of the terms of use of a website – without more – 22 cannot establish liability under the CFAA.” Facebook, Inc. v. Power Ventures, Inc., 844 23 F.3d 1058, 1067 (9th Cir. 2016). Instead, the court looks to see whether the conduct at issue 24 is analogous to breaking and entering. hiQ Labs, 31 F.4th at 1197. “The ‘without 25 authorization’ clause protects computers themselves by targeting so-called outside hackers 26 – those who access a computer without any permission at all. The ‘exceeds authorized ORDER OF DISMISSAL - 2 1 access’ clause provides complementary protection for certain information within 2 computers by targeting so-called inside hackers – those who access a computer with 3 permission, but then exceed the parameters of authorized access by entering an area of the 4 computer to which that authorization does not extend.” Id. at 1198 (quoting Van Buren v. 5 U.S., __ U.S. __, 141 S. Ct. 1648, 1658 (2021)) (internal quotation marks, citations, and 6 alterations omitted). 7 Plaintiff alleges in the First Amended Complaint that when he ran a Google search 8 regarding Ms. Parviz, two Harvard-related URLs (https://scholar.harvard.edu/mparviz and 9 https://collaborate.med.harvard.edu/display/~MP284/Parviz%2C+Mahsa) popped up.1 10 These web-based connections seemed to confirm Ms. Parviz’ representations that she 11 holds an M.D. or a Ph.D. from Harvard, that she lectured or taught there, and/or that she 12 has a number of scientific publications to her credit. In February 2022, plaintiff wrote to 13 the Harvard IT department suggesting that Ms. Parviz hacked into Harvard’s system or 14 misused her Harvard Extension School credentials to create and maintain a fake Harvard 15 persona. He requested that Harvard “consider deleting Ms. Parviz’s web pages and 16 disabling her email address for violations of the Harvard acceptable use policy . . . .” Dkt. 17 # 6 at 7. Plaintiff alleges that Harvard deleted Ms. Parviz’s webpage in March 2022. 18 In response to the second order to show cause, plaintiff argues that Ms. Parviz’ use 19 of a Harvard Medical School webpage when she was not enrolled at Harvard constitutes 20 accessing a computer without authorization. He cites without attribution what appear to be 21 the terms governing the use of the university’s web publishing platforms. See 22 https://hwp.harvard.edu/terms-use. The terms specify that a webpage can be created only 23 by “benefits-eligible faculty and staff employed by Harvard” or by “currently enrolled, 24 degree-seeking students,” and that “[f]aculty and students sites will be removed if the site 25
26 1 Plaintiff also alleges that Ms. Parviz used a Harvard.edu email address long after her association with the university ended. He has not explained how this conduct violates the CFAA. ORDER OF DISMISSAL - 3 1 owner leaves Harvard.” Id. Plaintiff alleges no facts regarding Ms. Parviz’s status when 2 she created the websites, nor was there an affirmative obligation on her part to delete the 3 webpages when her association with Harvard ended. Even if plaintiff had adequately 4 alleged a violation of Harvard’s terms of use, the Ninth Circuit has rejected a contract- 5 based interpretation of the phrases “without authorization” or “exceeds authorized access.” 6 In the absence of evidence that defendant broke through or evaded restrictions on access, a 7 violation of a webpage’s terms and conditions of use is not enough to give rise to a 8 plausible inference of liability under the CFAA. 9 Plaintiff’s allegations of a CFAA violation were previously found insufficient (Dkt. 10 # 16), and his response to the Order to Show Cause does not remedy the failures. The 11 CFAA claim is therefore DISMISSED. Because plaintiff has failed to allege facts which 12 could support the only federal cause of action asserted in the amended complaint or to 13 show circumstances compelling the Court to deviate from the common practice of 14 declining supplemental jurisdiction when no federal claims remain, the Court declines to 15 exercise supplemental jurisdiction over plaintiff’s state law claims. 16 Protective Order (Dkt. # 17 at 1-2) 17 Ms. Parviz seeks a protective order because plaintiff has contacted her with regards 18 to this lawsuit despite the existence of a domestic violence restraining order issued in a 19 California state proceeding. The terms of the restraining order have not been disclosed, and 20 Ms. Parviz is, apparently “as a matter of legal strategy,” proceeding pro se in this 21 litigation. The rules of this Court require plaintiff to provide notice of filings to defendant 22 and to confer regarding case management issues.
Free access — add to your briefcase to read the full text and ask questions with AI
5 UNITED STATES DISTRICT COURT AT SEATTLE 7
CASE NO. 2:23-cv-00755-RSL 9 Plaintiff, v. 10
12 Defendant. 13
14 This matter comes before the Court on the Court’s “Amended Second Order to 15 Show Cause” (Dkt. # 16), plaintiff’s response thereto (Dkt. # 18), defendant’s “Request for 16 Protective Order” (Dkt. # 17), and defendant’s “Verified Emergency Motion for 17 Temporary Restraining Order” (Dkt. # 20). 18 Background 19 In March 2022, plaintiff created a website about his ex-girlfriend, defendant Mahsa 20 Parviz. Plaintiff uses the page to explain how he was duped by Ms. Parviz, asserting that 21 she lied to him about her resume and criminal history and that, despite their break up, she 22 continues to contact him. His avowed purposes in creating the website were to shame 23 and/or expose defendant. In May 2023, Ms. Parviz contacted plaintiff, requesting that he 24 remove the webpage or face a domestic violence complaint filed in the city where he 25 practices law. Plaintiff immediately filed this lawsuit, essentially copying the contents of 26 ORDER OF DISMISSAL - 1 1 the website into a complaint seeking an award of damages (special, general, and punitive), 2 an award of attorney’s fees, and a declaration that Ms. Parviz is a vexatious litigant. The 3 Court issued an order to show cause why the case should not be dismissed for lack of 4 subject matter jurisdiction: plaintiff’s allegation regarding the amount in controversy was 5 wholly conclusory and unsupported by any factual allegations. Plaintiff then filed an 6 amended complaint adding a federal claim under the Computer Fraud and Abuse Act 7 (“CFAA”), 18 U.S.C. § 1030(g), and seeking an injunction against “threated violations of 8 the computer fraud law.” Dkt. # 6 at 21. 9 Sufficiency of Allegations of the First Amended Complaint 10 After reviewing the Verified First Amended Complaint, the Court found that “the 11 newly-added Computer Fraud and Abuse Act claim had not been adequately pled and that 12 ‘the values of judicial economy, convenience, fairness, and comity’ lead to the conclusion 13 that the Court ‘should decline the exercise of jurisdiction [over related state claims] by 14 dismissing the case without prejudice.’” Dkt # 16 at 2 (quoting Carnegie-Mellon Univ. v. 15 Cohill, 484 U.S. 343, 350 (1988) (citation omitted)). Plaintiff was given a second 16 opportunity to show cause why his claims should not be dismissed. 17 The CFAA forbids intentionally accessing a computer without authorization or in 18 excess of the authorized access, 18 U.S.C. § 1030(a), and “is best understood as an anti- 19 intrusion statute and not as a ‘misappropriation statute,’’ hiQ Labs, Inc. v. LinkedIn Corp., 20 31 F.4th 1180, 1196 (9th Cir. 2022) (quoting U.S. v. Nosal, 676 F.3d 854, 857-58 (9th Cir. 21 2012)). In the Ninth Circuit, “a violation of the terms of use of a website – without more – 22 cannot establish liability under the CFAA.” Facebook, Inc. v. Power Ventures, Inc., 844 23 F.3d 1058, 1067 (9th Cir. 2016). Instead, the court looks to see whether the conduct at issue 24 is analogous to breaking and entering. hiQ Labs, 31 F.4th at 1197. “The ‘without 25 authorization’ clause protects computers themselves by targeting so-called outside hackers 26 – those who access a computer without any permission at all. The ‘exceeds authorized ORDER OF DISMISSAL - 2 1 access’ clause provides complementary protection for certain information within 2 computers by targeting so-called inside hackers – those who access a computer with 3 permission, but then exceed the parameters of authorized access by entering an area of the 4 computer to which that authorization does not extend.” Id. at 1198 (quoting Van Buren v. 5 U.S., __ U.S. __, 141 S. Ct. 1648, 1658 (2021)) (internal quotation marks, citations, and 6 alterations omitted). 7 Plaintiff alleges in the First Amended Complaint that when he ran a Google search 8 regarding Ms. Parviz, two Harvard-related URLs (https://scholar.harvard.edu/mparviz and 9 https://collaborate.med.harvard.edu/display/~MP284/Parviz%2C+Mahsa) popped up.1 10 These web-based connections seemed to confirm Ms. Parviz’ representations that she 11 holds an M.D. or a Ph.D. from Harvard, that she lectured or taught there, and/or that she 12 has a number of scientific publications to her credit. In February 2022, plaintiff wrote to 13 the Harvard IT department suggesting that Ms. Parviz hacked into Harvard’s system or 14 misused her Harvard Extension School credentials to create and maintain a fake Harvard 15 persona. He requested that Harvard “consider deleting Ms. Parviz’s web pages and 16 disabling her email address for violations of the Harvard acceptable use policy . . . .” Dkt. 17 # 6 at 7. Plaintiff alleges that Harvard deleted Ms. Parviz’s webpage in March 2022. 18 In response to the second order to show cause, plaintiff argues that Ms. Parviz’ use 19 of a Harvard Medical School webpage when she was not enrolled at Harvard constitutes 20 accessing a computer without authorization. He cites without attribution what appear to be 21 the terms governing the use of the university’s web publishing platforms. See 22 https://hwp.harvard.edu/terms-use. The terms specify that a webpage can be created only 23 by “benefits-eligible faculty and staff employed by Harvard” or by “currently enrolled, 24 degree-seeking students,” and that “[f]aculty and students sites will be removed if the site 25
26 1 Plaintiff also alleges that Ms. Parviz used a Harvard.edu email address long after her association with the university ended. He has not explained how this conduct violates the CFAA. ORDER OF DISMISSAL - 3 1 owner leaves Harvard.” Id. Plaintiff alleges no facts regarding Ms. Parviz’s status when 2 she created the websites, nor was there an affirmative obligation on her part to delete the 3 webpages when her association with Harvard ended. Even if plaintiff had adequately 4 alleged a violation of Harvard’s terms of use, the Ninth Circuit has rejected a contract- 5 based interpretation of the phrases “without authorization” or “exceeds authorized access.” 6 In the absence of evidence that defendant broke through or evaded restrictions on access, a 7 violation of a webpage’s terms and conditions of use is not enough to give rise to a 8 plausible inference of liability under the CFAA. 9 Plaintiff’s allegations of a CFAA violation were previously found insufficient (Dkt. 10 # 16), and his response to the Order to Show Cause does not remedy the failures. The 11 CFAA claim is therefore DISMISSED. Because plaintiff has failed to allege facts which 12 could support the only federal cause of action asserted in the amended complaint or to 13 show circumstances compelling the Court to deviate from the common practice of 14 declining supplemental jurisdiction when no federal claims remain, the Court declines to 15 exercise supplemental jurisdiction over plaintiff’s state law claims. 16 Protective Order (Dkt. # 17 at 1-2) 17 Ms. Parviz seeks a protective order because plaintiff has contacted her with regards 18 to this lawsuit despite the existence of a domestic violence restraining order issued in a 19 California state proceeding. The terms of the restraining order have not been disclosed, and 20 Ms. Parviz is, apparently “as a matter of legal strategy,” proceeding pro se in this 21 litigation. The rules of this Court require plaintiff to provide notice of filings to defendant 22 and to confer regarding case management issues. Whether these interactions violate the 23 restraining order will have to be determined by the issuing court. 24 Motion to Seal (Dkt. # 17 at 2) 25 Defendant asserts that she intends to file counterclaims in the above-captioned 26 matter, some of which will depend on materials protected by the attorney-client privilege, ORDER OF DISMISSAL - 4 1 refer to defendant’s minor daughter, and/or relate to criminal matters that are still under 2 investigation. She again requests that the case file be sealed to limit disclosure of these 3 materials. Plaintiff’s complaint has now been dismissed and there are no counterclaims 4 pending. A seal is therefore unnecessary. 5 Motion to Proceed Under a Pseudonym (Dkt. # 17 at 2) 6 Ms. Parviz asserts that some of the information contained in the First Amended 7 Complaint is protected health care information and/or has been disclosed in violation of 8 the attorney-client privilege. She requests that, if the entire case file is not sealed, she be 9 permitted to proceed under the pseudonym “Jane Doe” to avoid harassment, injury, 10 ridicule, or embarrassment to herself and her family. The information at issue has been 11 posted on plaintiff’s webpage since June 2022 and has been publicly accessible on the 12 Court’s docket for almost three months. Plaintiff’s claims have now been dismissed, and 13 the case file will be closed once defendant’s pending motion for sanctions is resolved. 14 Altering the way defendant’s name appears in the docket to allow her to proceed under a 15 pseudonym at this late date would serve no purpose. 16 Motion for Temporary Restraining Order (Dkt. # 20) 17 Defendant seeks a temporary restraining order preventing plaintiff or his agents 18 from destroying, altering, or disclosing information that plaintiff allegedly obtained when 19 he logged into defendant’s Gmail account without authorization. No evidence is offered in 20 support of the allegations of unauthorized access to the Gmail account, unauthorized 21 access to webpages and servers linked to the Gmail account, the alteration or downloading 22 of confidential material, or any threat to alter, destroy, or disclose confidential material. 23 Having failed to show a likelihood of success on the merits of her claims of unlawful 24 access, spoliation, and/or unlawful disclosure, temporary injunctive relief is unavailable. 25
26 ORDER OF DISMISSAL - 5 1 For all of the foregoing reasons, plaintiff’s claims in the above-captioned matter are 2 hereby DISMISSED, and defendant’s motion for a protective order (Dkt. # 17) and motion 3 for a temporary restraining order (Dkt. # 20) are DENIED. The Clerk of Court is directed 4 to enter judgment against plaintiff and in favor of defendant. The Court will consider 5 defendant’s renewed motion for sanctions (Dkt. # 21) on or after the note date of 6 September 1, 2023, and will enter an amended judgment if necessary. 7
8 Dated this 16th day of August, 2023.
9 10 Robert S. Lasnik 11 United States District Judge 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 ORDER OF DISMISSAL - 6