Archive Links

Consumer Archive
CU System Archive
Market Archive
Products Archive
Washington Archive

News Now

CU System
Hannaford Breach Judge: Cardholders Not a Class
PORTLAND, Maine (3/27/13)--A U.S. District judge in Portland, Maine, has denied a class-action certification to plaintiffs in the data breach lawsuit against Hannaford Bros., a New England grocery chain.

The case is a consolidation of a number of civil lawsuits filed. Plaintiffs sought compensation for costs they bore in replacing compromised debit and credit cards, reimbursing fraudulent charges on the cards, notifying members or customers whose cards were compromised, closing and setting up new accounts, and footing the bill for credit and ID theft monitoring and insurance services.

Hannaford Bros. suffered the point-of-sale breach from Dec. 7, 2007, through March10, 2008, when an estimated four million card numbers were stolen . The numbers were used at 165 Hannaford markets in the Northeast and 106 Sweetbay supermarkets in Florida (News Now Nov. 30, 2011).

U.S. District Judge D. Brock Hornby's opinion noted that the plaintiffs satisfied all the criteria but one--predominance--to be designated a Rule 23 (b) (3) class.  The rule provides for class certification where "questions of law or fact common to class members predominate over any questions affecting only individual members," the ruling said. 

Hannaford's argument--that it has a due process right to cross-examine every class member individually about their experience related to damages--"would basically eliminate consumer class actions," said the ruling.  On the other hand, Hornby added, plaintiffs could not provide the total lump sum of damages without an expert to review the data. "Without an expert, they cannot prove total damages, and the alternative…is a trial involving individual issues for each class member as to what happened to his/her data and account, what he/she did about it, and why."

The argument noted that the plaintiffs satisfied all the other criteria for the class:

  • Numerosity (whether the class as defined is composed of sufficient numbers to warrant a class action treatment);
  • Commonality (whether questions of law or fact are common to the class);
  • Typicality (whether class representatives, in pursuing their own interests, concurrently will advance those of the class);
  • Adequacy (have no potential conflict between plaintiffs and potential class members,  and choose lawyers who can "vigorously conduct the proposed litigation");  and
  • Superiority (whether the case is the best way to adjudicate the issue). In the last category, the court said Hannaford's gift-card refund program could not be considered a method of "adjudicating the controversy."
The judge noted that the plaintiffs needed to "show that Hannaford was negligent or breached an implied contract, that Hannaford's conduct caused the data breach, that the data breach affected their debit or credit cards, and that they took reasonable mitigating efforts as a result."


RSS print
News Now LiveWire
Goodwill Industries latest to report data security breach http://t.co/gIaXNsT4Bk
11 hours ago
CUNA economist Schenk discusses regulators' focus on interest-rate risk. See CU Magazine: http://t.co/tW1p9rTSSv
13 hours ago
Fed issues annual report on general-use prepaid cards in gov't-administered payment programs. http://t.co/3zPhejSPZt
13 hours ago
Children in foster care face higher risk of identity theft via @NBCNews http://t.co/Dif0hCfBdA
13 hours ago
.@Cornerstone_CUL's leadership conference includes food drive for San Antonio food bank http://t.co/h2O8O4TxuD
14 hours ago