Commentary Addressing Risks and Opportunities Through the Lifecycle of Data, Technology, Advertising and Innovation

Data Counsel

Home | Data Counsel

Authored by: <a href="mailto:apate@bakerlaw.com">Alan Pate</a>

In a ruling this past Wednesday, November 14th, a Federal Judge in the Western District of Washington dismissed a class action against video game developer Valve Corporation. The class action stemmed from a November 6th, 2011 data breach of Valve’s popular online video game distribution platform, “Steam.” As a result of this breach hackers allegedly gained access to billing addresses, passwords, online handles/ID’s, and credit card information. Plaintiffs, a class of Steam subscribers, brought claims under six separate California causes of action alleging both present and future harm resulting from this breach.

Judge James L. Robart dismissed all of plaintiffs’ claims for failure to adequately plead damages. Judge Robart’s order discussed the legal inadequacy of the pleadings on both the future and present damages claims. As to the future damages, Plaintiffs had pleaded that because of the 2011 data breach they may be forced to spend money at some unspecified time in the future to “protect their privacy.” Citing a string of cases addressing this issue, Judge Robart explained, “when personal information is compromised due to a security breach, there is no cognizable harm absent actual fraud or identity theft.” Alleging only the possibility of future harm was insufficient.

As for present damages, Plaintiffs had pleaded that as a result of the 2011 breach they had “various services and subscription interrupted, loss of data, … an inability to access various gaming networks,” and that they lost money paid to Valve for “products and services.” Judge Robart held that this too was an insufficient plea of damages. Emphasizing the “higher plausibility threshold” that their complaint required due to the size and potential expense of the data breach class action, Judge Robart explained that to overcome a motion to dismiss, the plaintiffs must lay out exactly what services were interrupted, what data was lost, or how exactly money was lost on their Steam subscriptions (a free service).

Plaintiffs’ claims were dismissed without prejudice and they were given leave to amend within 30 days. The case is Grigsby v. Valve, Corp., No. C12-0553 (W.D.Wa. Nov. 14, 2012).

Data Breach Class Action against Popular Video Game Developer Dismissed for Failure to Plead Adequate Damages