Whelan, Jr. v. Diligent Corporation

District Court, S.D. New York·Decided April 4, 2025·No. 1:22-cv-07598·Unknown

Opinion

USDC SDNY DOCUMENT UNITED STATES DISTRICT COURT Rocd FILED SOUTHERN DISTRICT OF NEW YORK anew DATE FILED: _4/4/2025 FRED WHELAN and MEGAN ELLIS, on behalf of □ themselves and all others similarly situated, Plaintiffs, 22 Civ. 7598 (AT) -against- ORDER DILIGENT CORPORATION, Defendant. ANALISA TORRES, District Judge: Plaintiffs, Fred Whelan and Megan Ellis, bring this class action against Defendant, Diligent Corporation (“Diligent”), claiming negligence, breach of contract, data privacy violations, and other related claims arising out of a hack of Diligent’s computer systems that compromised the personally identifiable information (“PII’’) of Diligent’s employees. See generally Am. Compl., ECF No. 33. Having reached a settlement (the “Settlement”) with Diligent, ECF No. 37-1, Plaintiffs seek an order (1) preliminarily approving the Settlement; (2) conditionally certifying a proposed settlement class and subclass under Federal Rule of Civil Procedure 23(a) and (b); (3) appointing Plaintiffs as representatives of, and their attorneys as class counsel to, the class; (4) appointing Angeion Group (“Angeion’”) to serve as the settlement administrator; (5) approving the content, and directing the distribution, of the notices of settlement and claim form (collectively, the “Notice”); and (6) scheduling a fairness hearing. Mem. at 32, ECF No. 37. Diligent, which denies Plaintiffs’ allegations and disclaims liability, does not oppose Plaintiffs’ motion for preliminary approval. See Settlement at 1. For the reasons stated below, Plaintiffs’ motion is GRANTED.

BACKGROUND Plaintiffs allege that Diligent, a software company, was hacked by cybercriminals on or around May 21, 2022. Am. Compl. ¶¶ 1–2. During the hack, the cybercriminals stole the PII of over 1,100 current and former Diligent employees. Id. ¶ 2. Plaintiffs claim that, as a result of

the breach, employees whose PII were compromised now have a heightened risk of fraud and identity theft, and many of them have been forced to take steps to monitor their financial accounts and incur out-of-pocket expenses to detect and deter identity theft. Id. ¶¶ 10–13. According to Plaintiffs, Diligent had common law, statutory, and/or contractual duties to protect its employees’ PII and to notify employees of the data breach, and Diligent breached those duties by failing to take reasonable steps to prevent, detect, or stop a data breach like the hacking at issue and by failing to timely notify employees of the breach once it occurred. See id. ¶¶ 4, 6–7, 81–88, 90–95, 102–07, 123. Diligent denies Plaintiffs’ allegations. Settlement at 1. Plaintiffs filed their lawsuit in September 2022. ECF No. 1. Over several weeks in early 2023, the parties negotiated a settlement agreement with the assistance of independent mediator

Bruce Friedman of JAMS. Mem. at 4. The resulting Settlement provides for a “Settlement Class” consisting of all individuals, or their respective successors or assigns, who reside in the United States and whose PII was impacted by the data breach, as well as a “California Settlement Subclass” consisting of all Settlement class members who resided in California on May 23, 2023. Id. Under the Settlement, Diligent agrees to pay up to $200,000 to a common fund that will be used to reimburse class members for any out-of-pocket costs that are “fairly traceable” to the data breach, as well as time spent monitoring accounts, up to $500 per class member. Id. at 5–6; Settlement ¶ 45(b)–(c). Class members are also eligible to receive up to $2,500 in reimbursement for monetary losses that were “more likely than not” caused by the data breach. 2 Settlement ¶ 45(a). Members of the California Settlement Subclass are entitled to an additional $50 payment, subject to the $500 cap on out-of-pocket expenses, as consideration for releasing their California-specific legal claims against Diligent. See id. ¶ 45(d); ECF No. 40 at 1–2. All class members will be entitled to receive free credit monitoring services and at least $1,000,000

in identity theft insurance coverage, which will be provided by Diligent separate from, and in addition to, the direct payments described above. Settlement ¶ 47–48. After the parties finalized and executed the Settlement in June 2023, Plaintiffs filed the instant motion for preliminary approval. Mem. at 4; ECF Nos. 36–38. Plaintiffs noted that, if the Settlement received preliminary approval, they intended to move for an award of up to $100,000 in attorney’s fees and $8,000 in costs, as well as service awards for the named Plaintiffs totaling $5,000, all of which would be paid by Diligent outside of the common fund. Mem. at 7–8. In December 2023, the Court ordered supplemental briefing to address issues related to the California Settlement Subclass, the adequacy of the Settlement terms, and the reasonableness

of Plaintiffs’ anticipated requests for attorney’s fees and service awards. ECF No. 39. Plaintiffs filed their first supplemental brief on January 22, 2024, ECF No. 40, and a second supplemental letter brief on September 12, ECF No. 41. By order dated February 24, 2025, the Court directed Plaintiffs to file additional briefing on the application of Rule 23 to the California Settlement Subclass, ECF No. 44, which Plaintiffs filed on March 7, ECF No. 45. DISCUSSION I. Legal Standard Federal Rule of Civil Procedure 23(e) requires judicial approval of any class action settlement. Settlement approval typically occurs in two stages: (1) preliminary approval, when 3 “prior to notice to the class, a court makes a preliminary evaluation of fairness;” and (2) final approval, when “notice of a hearing is given to the class members, [and] class members and settling parties are provided the opportunity to be heard on the question of final court approval.” In re Payment Card Interchange Fee & Merch. Disc. Antitrust Litig., 330 F.R.D. 11, 27

(E.D.N.Y. 2019) (alteration in original) (quoting In re LIBOR-Based Fin. Instruments Antitrust Litig., No. 11 Civ. 5450, 2016 WL 7625708, at *2 (S.D.N.Y. Dec. 21, 2016)); see also Fed. R. Civ. P. 23(e). Even at the preliminary approval stage, the Court’s role in reviewing the proposed settlement “is demanding because the adversariness of litigation is often lost after the agreement to settle.” Zink v. First Niagara Bank, N.A., 155 F. Supp. 3d 297, 308 (W.D.N.Y. 2016) (citation omitted). The Court must consider whether it will likely be able to (1) “approve the proposal under Rule 23(e)(2);” and (2) “certify the class for purposes of judgment on the proposal.” In re Payment Card, 330 F.R.D. at 28 (quoting Fed. R. Civ. P. 23(e)(1)(B)(i)–(ii)). II. Likelihood of Approval Under Rule 23(e)(2) At the preliminary approval stage, the Court must assess “whether it is ‘likely’ [that] it

will be able to finally approve the settlement after notice, an objection period, and a fairness hearing.” 4 Newberg and Rubenstein on Class Actions § 13:10 (6th ed.) (citation omitted). To approve a proposed settlement, the Court must find “that it is fair, reasonable, and adequate” after considering four factors: (1) adequacy of representation, (2) existence of arm’s-length negotiations, (3) adequacy of relief, and (4) equitableness of treatment of class members. Fed. R. Civ. P. 23(e)(2); see In re GSE Bonds Antitrust Litig., 414 F. Supp. 3d 686, 692 (S.D.N.Y. 2019).1

Free access — add to your briefcase to read the full text and ask questions with AI

Whelan, Jr. v. Diligent Corporation, (S.D.N.Y. 2025).

Whelan, Jr. v. Diligent Corporation (Whelan, Jr. v. Diligent Corporation) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Amchem Products, Inc. v. Windsor
521 U.S. 591 (Supreme Court, 1997)
Wal-Mart Stores, Inc. v. Dukes
131 S. Ct. 2541 (Supreme Court, 2011)
In Re Literary Works in Electronic Databases
654 F.3d 242 (Second Circuit, 2011)
Robidoux v. Celani
987 F.2d 931 (Second Circuit, 1993)
In Re Austrian & German Bank Holocaust Litigation
80 F. Supp. 2d 164 (S.D. New York, 2000)
Tyson Foods, Inc. v. Bouaphakeo
577 U.S. 442 (Supreme Court, 2016)
Marisol A. ex rel. Forbes v. Giuliani
126 F.3d 372 (Second Circuit, 1997)
Goldberger v. Integrated Resources, Inc.
209 F.3d 43 (Second Circuit, 2000)
Ramirez v. Riverbay Corp.
39 F. Supp. 3d 354 (S.D. New York, 2014)
Zink v. First Niagara Bank, N.A.
155 F. Supp. 3d 297 (W.D. New York, 2016)
In re Libor-Based Fin. Instruments Antitrust Litig.
299 F. Supp. 3d 430 (S.D. Illinois, 2018)
Wal-Mart Stores, Inc. v. Visa U.S.A. Inc.
396 F.3d 96 (Second Circuit, 2005)
Miles v. Merrill Lynch & Co.
471 F.3d 24 (Second Circuit, 2006)
Johnson v. Nextel Communications Inc.
780 F.3d 128 (Second Circuit, 2015)
Bolanos v. Norwegian Cruise Lines Ltd.
212 F.R.D. 144 (S.D. New York, 2002)