B.J.F. v. PNI Digital Media, Inc., No. 2:2015cv01643 - Document 40 (W.D. Wash. 2016)

Court Description: ORDER granting Defendant's 24 Motion to Dismiss by Judge Marsha J. Pechman. (AD)

Download PDF
1 2 3 4 5 6 7 UNITED STATES DISTRICT COURT WESTERN DISTRICT OF WASHINGTON AT SEATTLE 8 9 10 11 B. J.F. and T.A.N., individuals, on behalf of themselves and all others similarly situated, 12 13 14 15 Plaintiffs, CASE NO. C15-1643-MJP ORDER GRANTING DEFENDANT’S MOTION TO DISMISS v. PNI DIGITAL MEDIA INC, Defendant. 16 17 THIS MATTER comes before the Court on Defendant’s Motion to Dismiss, (Dkt. No. 18 24). Having reviewed the Motion, Plaintiffs’ response, (Dkt. No. 35), Defendant’s reply, (Dkt. 19 No. 36), and the related record, the Court hereby GRANTS the Motion. For reasons stated in 20 this Order, the dismissal is without prejudice. 21 Background 22 The following facts are alleged in Plaintiffs’ Amended Complaint. (Dkt. No. 13.) 23 Defendant PNI Digital Media, Inc. provides a proprietary transactional software platform that is 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 1 1 used by retailers such as Costco, CVS Pharmacy, and Rite Aid to sell personalized photo 2 services and products to consumers. (Id. at 5.) 3 Between approximately June 2014 and July 2015, Defendant was subject to a data breach 4 during which hackers stole the personal financial information of numerous individuals whose 5 information was included in Defendant’s electronic records. (Id. at 1.) The personal and 6 financial information obtained by the hackers included names, telephone numbers, mailing 7 addresses, email addresses, usernames, hashed passwords, and credit card information (including 8 card numbers, expiration dates, and verification codes). (Id.) Plaintiffs B.J.F. and T.A.N. utilized Defendant’s software platform and provided 9 10 sensitive personal and/or financial information to Defendant. (Id. at 5–7.) Their sensitive 11 personal and/or financial information was compromised in the data breach. (Id. at 11.) In 12 September 2015, Plaintiffs received notice of the data breach from the retailers through whom 13 they utilized Defendant’s software platform. (Id. at 9–10.) 14 Plaintiffs commenced this suit against Defendant on October 14, 2015, and assert claims 15 for negligence, breach of implied contract, breach of contract, bailment, violations of the 16 Georgia, Hawaii and Washington data breach statutes, and unjust enrichment arising out of the 17 data breach. (Dkt. Nos. 1, 13.) Plaintiffs seek to represent a class of all United States citizens 18 whose personal information was compromised by the data breach. (Dkt. No. 13 at 13.) Defendant now moves to dismiss Plaintiffs’ Amended Complaint under Fed. R. Civ. P. 19 20 12(b)(1), (2), (3), and (6), arguing Plaintiffs lack standing, Plaintiff T.A.N. cannot establish 21 proper venue or personal jurisdiction over Defendant, and that Plaintiffs do not state a claim 22 upon which relief can be granted. (Dkt. No. 24.) Plaintiffs oppose the motion. (Dkt. No. 35.) 23 // 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 2 1 2 3 4 Discussion I. Legal Standards A. Article III Standing To have standing, a plaintiff must plead and prove she has suffered sufficient injury to 5 satisfy the “case or controversy” requirement of Article III of the United States Constitution. See 6 Clapper v. Amnesty Int’l USA, 133 S. Ct. 1138, 1147 (2013). Specifically, a plaintiff must 7 allege an “injury-in-fact” that is (1) “concrete, particularized, and actual or imminent,” (2) “fairly 8 traceable to the defendant’s challenged action,” and (3) “redressable by a favorable ruling.” Id. 9 Mere “allegations of possible future injury are not sufficient.” Id. Thus when a plaintiff seeks to 10 establish standing based on a potential future injury, it “must be certainly impending to constitute 11 injury in fact.” Id. 12 13 B. Personal Jurisdiction and Venue Under Rules 12(b)(2) and 12(b)(3), Plaintiffs bear the burden of showing that venue and 14 personal jurisdiction are proper. Design Res., Inc. v. Leather Indus. of Am., Inc., 2010 WL 15 342181, at *1–2 (W.D. Wash. Jan. 21, 2010) (venue) (citations omitted); Ranza v. Nike, Inc., 16 793 F.3d 1059, 1068 (9th Cir. 2015) (personal jurisdiction). 17 General jurisdiction requires “affiliations so continuous and systematic as to render the 18 foreign corporation essentially at home in the forum State.” Ranza v. Nike, Inc., 793 F.3d 1059, 19 1069 (9th Cir. 2015). “Specific jurisdiction exists when a case arises out of or relates to the 20 defendant’s contacts with the forum.” Id. at 1068. 21 Venue is proper in the district where “a substantial part of the events or omissions giving 22 rise to [plaintiff’s] claim occurred,” or in which defendant resides. 28 U.S.C. §1391(b)(1) & (2). 23 For purposes of venue, a corporation’s residence turns on whether it “is subject to the court's 24 personal jurisdiction with respect to the civil action in question . . .” 28 U.S.C. §1391(c)(2). ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 3 1 2 II. Standing Plaintiff B.J.F. Defendant argues the Court should dismiss Plaintiff B.J.F.’s claims because Plaintiff 3 B.J.F. lacks standing. (Dkt. No. 24 at 10–12.) Specifically, Defendant contends Plaintiff B.J.F. 4 fails to allege injury, because she did not disclose any sensitive personal or financial information 5 on the Costco photo website hosted by Defendant. (Id. at 11.) Defendant points to the fact that 6 Plaintiff B.J.F. is an attorney, and has publicly listed her name, work email address, and phone 7 number on her firm’s Internet website. (Id.) Defendant offers evidence that this is the same 8 information Plaintiff B.J.F. provided on the Costco photo website. (Dkt. No. 25 at 3.) 9 Defendant argues that although Plaintiff B.J.F. did provide her password on the website, she does 10 not allege that she failed to reset her password after receiving notice of the data breach from 11 Costco, nor does she allege any misuse of the password before she reset it. (Dkt. No. 24 at 11.) 12 Plaintiffs do not dispute that Plaintiff B.J.F. did not disclose payment card information on 13 the Costco photo website, or that Plaintiff B.J.F. publicly listed her name, work email address, 14 and phone number on her firm’s Internet website. (Dkt. No. 35 at 14–15.) Instead, they argue 15 while Plaintiff B.J.F. may not have disclosed payment card information on the retailer’s website, 16 disclosure of her password is sufficient to confer standing. (Id.) In a declaration offered in 17 support of Plaintiffs’ response brief, Plaintiff B.J.F. states that the password she used on the 18 Costco photo website “was substantially the same, and in some cases exactly the same, as 19 passwords that [she] used for other accounts . . .” (Dkt. No. 35-1 at 3.) Plaintiffs contend “by the 20 time [Plaintiff B.J.F] received notice from Costco regarding the breach on September 29, 2015, 21 hackers had access to [her] password for over 15 months.” (Dkt. No. 35 at 14.) 22 The Court finds Plaintiff B.J.F fails to allege injury sufficient to confer standing. 23 Plaintiff B.J.F.’s testimony that the password she disclosed on the Costco photo website hosted 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 4 1 by Defendant was the same password she used for other accounts is insufficient to confer 2 standing because: (1) Plaintiff B.J.F. does not describe the nature of the other accounts that she 3 used the same password for; and (2) Plaintiff B.J.F. does not explain how she would be harmed if 4 those other accounts were accessed by hackers. On this record, the Court cannot conclude any 5 potential future injury to Plaintiff B.J.F. is “certainly impending.” Clapper, 133 S. Ct. at 1147. 6 Therefore, the Court GRANTS Defendant’s Motion to Dismiss as to all claims asserted by 7 Plaintiff B.J.F. on the grounds that Plaintiff B.J.F. lacks standing. However, the dismissal is 8 without prejudice. 9 III. Personal Jurisdiction and Venue In the Amended Complaint, Plaintiffs allege that “Defendant PNI is a corporation 10 11 organized and existing under the laws of the Canadian province of British Columbia, with its 12 principal place of business and headquarters in Vancouver, British Columbia.” (Dkt. No. 13 at 13 4.) 14 Defendant argues the Court should dismiss Plaintiff T.A.N.’s claims because she cannot 15 establish personal jurisdiction and venue. (Dkt. No. 24 at 15–17.) Specifically, Defendant 16 contends: (1) the Court lacks general jurisdiction over Defendant; (2) the Court lacks specific 17 jurisdiction over Defendant; and (3) no part of the events giving rise to Plaintiff T.A.N.’s claims 18 took place in this district. (Id.) 19 Plaintiffs argue the Court has specific jurisdiction over Defendant because: (1) Defendant 20 regularly conducts business in Washington, and has sufficient minimum contacts in Washington; 21 and (2) one of Defendant’s largest sources of customers is the retail chain Costco, which has 22 numerous stores and operational facilities, including its headquarters, in Washington State. (Dkt. 23 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 5 1 No. 35 at 15–17.) Plaintiffs contend that because the Court has personal jurisdiction over 2 Defendant, venue is proper in this district. (Id. at 15.) 3 Plaintiffs’ arguments are unavailing. Plaintiff T.A.N. is a Georgia resident, who 4 purchased her photos from CVS, a Rhode Island company. (Dkt. No. 13 at 3–4.) The Amended 5 Complaint is silent as to how CVS came to use Defendant’s software platform. (Id.) There are 6 also no facts in the Amended Complaint that show that Plaintiff T.A.N.’s use of Defendant’s 7 software platform is connected to the state of Washington. (Id.) Although Plaintiffs offer 8 evidence that there are CVS locations in this District, (Dkt. No. 35 at 17), this is insufficient to 9 show that Plaintiff T.A.N.’s claims arise out of or are related to any activities in Washington. 10 Therefore, the Court concludes it lacks specific jurisdiction over Defendant with respect to 11 Plaintiff T.A.N.’s claims. And, because it lacks personal jurisdiction over Defendant, the Court 12 also finds venue is improper in this district. 28 U.S.C. §1391(b)(1) & (2). Based on the foregoing, the Court GRANTS Defendant’s Motion to Dismiss as to 13 14 Plaintiff T.A.N.’s claims on the grounds that Plaintiff T.A.N. cannot establish personal 15 jurisdiction and venue. The dismissal is without prejudice. 16 Conclusion The Court GRANTS Defendant’s Motion to Dismiss, (Dkt. No. 24), and DISMISSES the 17 18 claims asserted by Plaintiffs in this action. For reasons stated in this Order, the dismissal is 19 without prejudice. 20 // 21 // 22 // 23 // 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 6 1 The clerk is ordered to provide copies of this order to all counsel. 2 Dated this 27th day of July, 2016. A 3 4 Marsha J. Pechman United States District Judge 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 ORDER GRANTING DEFENDANT’S MOTION TO DISMISS- 7

Some case metadata and case summaries were written with the help of AI, which can produce inaccuracies. You should read the full case before relying on it for legal research purposes.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.