From Casetext: Smarter Legal Research

In re Sonic Corp. Customer Data Sec. Breach Litig.

UNITED STATES DISTRICT COURT NORTHERN DISTRICT OF OHIO
Aug 12, 2019
CASE NO. 1:17-md-2807 (N.D. Ohio Aug. 12, 2019)

Opinion

CASE NO. 1:17-md-2807 MDL No. 2807

08-12-2019

IN RE: SONIC CORP. CUSTOMER DATA SECURITY BREACH LITIGATION


OPINION & ORDER
[Resolving Docs. 151, 162] :

In 2017, not yet identified third parties stole Sonic customer payment card data from more than three-hundred Sonic Drive-Ins. Consumer Plaintiffs sued Sonic, alleging that Sonic's inadequate security practices allowed the breach. The parties have now reached a settlement.

Sonic Corporation and its subsidiaries and affiliates Sonic Industries Services, Inc., Sonic Capital LLC, Sonic Franchising LLC, Sonic Industries LLC, and Sonic Restaurants, Inc. (collectively, "Sonic" or "Sonic Defendants").

Having previously obtained preliminary approval, Plaintiffs now move for final settlement approval, service awards, and attorneys' fees, costs, and expenses.

For the following reasons, the Court CERTIFIES the Settlement Class, APPROVES the Settlement Agreement, and GRANTS service awards and attorneys' fees, costs, and expenses as stated in this order.

I. Background

In late September 2017, news outlets reported that Sonic customer payment card data had been compromised. Numerous lawsuits seeking class action status followed.

On December 12, 2017, the Judicial Panel on Multidistrict Litigation transferred five cases to this Court. Three more cases followed shortly after.

Docs. 1, 3, 17. Three of the cases were voluntarily dismissed early in the litigation.

After motion-to-dismiss briefing, an amended complaint, three mediations, and extensive settlement discussions, the parties reached a settlement agreement. On October 10, 2019, Plaintiffs moved for preliminary approval of the class action settlement and for preliminary certification of the Settlement Class.

Docs. 114 (with redactions), 135 (sealed).

Doc. 132.

The Court denied Plaintiffs' initial motion for settlement approval because thirteen of the twenty-two proposed Settlement Class representatives were not members of the Settlement Class. Discovery evidence showed that these thirteen plaintiffs had made purchases at Sonic stores that were not actually impacted by the data theft.

The parties then entered an amended settlement agreement ("Settlement Agreement") and Plaintiffs again sought preliminary approval. The Settlement Agreement defines the Settlement Class as all U.S. residents who made a debit or credit card purchase at one of 325 involved Sonic Drive-In locations between April 7, 2017 and October 28, 2017.

Doc. 144.

Settlement Agreement ¶¶ 1.10, 1.13, 1.27, 1.29, Doc. 144-2; id. ¶ 1.27 ("The Settlement Class specifically excludes: (i) Sonic (as defined below); (ii) Sonic Franchisees (as defined below); (iii) Infor (as defined above); (iv) all Settlement Class members who timely and validly requested exclusion from and/or opt-out of the Settlement Class; (v) the Judge or Magistrate Judge to whom the action is assigned and, any member of those Judges' staffs or immediate family members; and (vi) any other person found by a court of competent jurisdiction to be guilty under criminal law of initiating, causing, aiding or abetting the criminal activity or occurrence of the Data Breach or who pleads nolo contendere to any such charge.").

Under the Settlement Agreement, Sonic will pay $4,325,000 into a settlement fund. After notice costs, settlement administrator fees, service awards, attorneys' fees, costs, and expenses, the fund balances will be distributed to class members. Sonic will not object to Plaintiffs' requested attorneys' fees, up to one-third of the total fund ($1,441,66.67), reasonable costs and expenses ($311,693.53), or service awards ($42,000).

On December 20, 2018, the Court preliminarily approved the settlement and preliminarily certified the class.

Doc. 145.

Plaintiffs now move for final settlement approval, for service awards, and for attorneys' fees, costs, and expenses. The Court held a fairness hearing on July 25, 2019.

Motion for Final Settlement Approval, Doc. 162; Motion for Attorney Fees, Costs, and Expenses, Service Awards, and Individual Payments, Doc. 151; Amended Motion for Attorney Fees, Costs, and Expenses, Service Awards, and Individual Payments, Doc. 157. Additionally, the Court granted Plaintiffs' unopposed motion for leave to file Plaintiff counsel's detailed time and expense records under seal. Doc. 156.

Doc. 168.

II. Discussion

A. Standing

While the parties do not dispute standing, considering the Supreme Court's recent decision in Frank v. Gaos, the Court briefly examines it.

Article III standing requires: (1) an injury in fact, (2) a causal connection between the injury and the conduct complained of, and (3) that it is "likely, as opposed to merely speculative, that the injury will be redressed by a favorable decision." In class actions, the Court examines the class representatives only.

Lujan v. Defs. of Wildlife, 504 U.S. 555, 560 (1992) (internal quotation marks omitted).

Here, some class representatives allege that they experienced unauthorized charges on their payment cards (although each received complete reimbursement from their banks). Other representatives did not experience unauthorized charges but their banks preemptively cancelled their cards.

The representatives allege they spent time dealing with issues related to their compromised credit or debit cards; most continue to spend time checking their accounts. Each representative also was deprived of their credit or debit card for some period, ranging from two days to over a year. This deprivation itself caused inconveniences—having to update account payment methods or use a less desired payment method, to name a couple. One representative did not replace her debit card for six months out of fear that it would happen again.

Accepting the class representatives' allegations as true and construing them in their favor, the representatives suffered concrete and particularized injuries caused by Sonic. Further, the sought monetary and injunctive relief would redress these harms. Plaintiffs have standing.

See Lujan, 504 U.S. at 560 (explaining that an "injury in fact" is "an invasion of a legally protected interest which is (a) concrete and particularized, and (b) actual or imminent, not conjectural or hypothetical" (internal quotation marks omitted)); G alaria v. Nationwide Mut. Ins. Co., 663 F. App'x 384, 388 (6th Cir. 2016) (finding allegations that the plaintiffs and other putative class members "must expend time and money to monitor their credit, check their bank statements, and modify their financial accounts" sufficient to support standing).

B. Certifying the Settlement Class

The Court first decides whether to certify the Settlement Class. The Court gives "undiluted, even heightened, attention" to certification requirements when the class is for settlement purposes only. Plaintiffs must show that: (i) the class is too numerous for joinder, (ii) there are legal or factual questions common to the entire class, (iii) the class representatives' claims are typical of the class, and (iv) they will adequately represent the class' interests. Further, because Plaintiffs seek Rule 23(b)(3) certification, they must show that common questions predominate over individualized ones and proceeding as a class is superior to other methods.

See Fed. R. Civ. P. 23(e)(1), Advisory Committee Notes, 2018 Amendments ("The ultimate decision to certify the class for purposes of settlement cannot be made until the hearing on final approval of the proposed settlement.").

UAW v. Gen. Motors Corp., 497 F.3d 615, 625 (6th Cir. 2007) (explaining that "Rule 23 is designed to protect absentees by blocking unwarranted or overbroad class definitions" (quoting Amchem Prods., Inc. v. Windsor, 521 U.S. 591, 620 (1997) (internal quotation marks omitted))).

Numerosity: Sonic estimates that there are 1.5 million Settlement Class members. The numerosity requirement is satisfied.

Commonality & Predominance: Class claims satisfy commonality if they "depend upon a common contention" that "is capable of class-wide resolution—which means that determination of its truth or falsity will resolve an issue that is central to the validity of each one of the claims in one stroke."

Wal-Mart Stores, Inc. v. Dukes, 564 U.S. 338, 350 (2011).

The class members' claims arise from the same event—the Sonic data breach. And they concern the same general legal questions, including: whether Sonic was legally required to protect Plaintiffs' data, whether Sonic failed to adequately safeguard Plaintiffs' data, and whether Sonic failed to promptly notify Plaintiffs.

Typicality: Here, the class representatives' claims and those of the other class members both arise from the same data breach at the same 325 Sonic Drive-Ins. Further, they both involve the same general legal theories relating to Sonic's failure to adequately protect payment card data. As Settlement Class representatives advance their own interests, they also advance the interests of Settlement Class members.

See In re Whirlpool Corp. Front-Loading Washer Prod. Liab. Litig., 722 F.3d 838, 852-53 (6th Cir. 2013) ("This requirement insures that the representatives' interests are aligned with the interests of the represented class members so that, by pursuing their own interests, the class representatives also advocate the interests of the class members.").

Adequacy of Representation: Class representatives are adequate when they have vigorously prosecuted the interests of the class through qualified counsel. "[A]dequacy of representation turns in part on the competency of class counsel and in part on the absence of conflicts of interest."

UAW, 497 F.3d at 626 (explaining that this is usually "the case if the representatives are part of the class and possess the same interest and suffer the same injury as the class members") (internal quotation marks and citation omitted).

Id. (internal quotation marks omitted).

As discussed above, the class representatives' interests align with other class members' interests. Class counsel are qualified, experienced, and generally able to conduct the litigation. Accordingly, the Court finds that the class representatives fairly and adequately protected the class interests.

See id. at 626 (explaining that this requirement is usually satisfied "if the representatives are part of the class and possess the same interest and suffer the same injury as the class members") (internal quotation marks and citation omitted).

Predominance: "The 'predominance inquiry tests whether proposed classes are sufficiently cohesive to warrant adjudication by representation.'" The numerous common questions of fact and law that arise from Sonic's conduct predominate over any individualized issues.

Tyson Foods, Inc. v. Bouaphakeo, 136 S. Ct. 1036, 1045 (2016) (citation omitted).

Superiority: The class members' claims are too small to pursue individually. The class vehicle allows Plaintiffs to pool their claims and allows the Court to conserve resources. The Court finally certifies the class for settlement purposes.

C. Notice Program

The Court next considers whether the class received adequate notice of the settlement. Rule 23 and due process require "the best notice that is practicable under the circumstances, including individual notice to all members who can be identified through reasonable effort."

In this case, because Sonic did not possess contact information for class members, direct notice was impossible. Instead, the notice program lasted ninety days and included: (1) in-store notice at the 325 Sonic Drive-Ins; (2) geographically targeted Facebook and Google internet ads; (3) notice in publications; (4) banner notice on Sonic's website and Facebook page; and (5) long-form notice on the Sonic website. The claim submission process was simple and required no supporting documentation, only a signature attesting that the information provided was true.

Doc. 144-2 at 57-58, 60-61. The claim form also mentioned that the claimant potentially could be required to provide support for his or her claim and that they should retain in their possession any receipts, credit card statements, bank statements, or other documents to support their purchase and, if applicable, the authorized charge.

Plaintiffs' notice program was not perfect. One obvious flaw was the Southern Living magazine notice. Unlike the full page, easily readable, dual-column notice that Plaintiffs attached to their preliminary approval motion, the published notice had been compressed into a single, one-third page column with type so small that it greatly reduced the odds that the notice would be read.

Plaintiffs and the KKC administrator give little useful information regarding how the notice program "reached" 74.1% of Settlement Class members. Plaintiffs simply aver that they used "advertising-industry standard reach calculations." Once again, without more, this is unhelpful. The parties do not know the identities of Settlement Class members—hence the indirect notice program. And they give no information to explain how they were able to make this estimation.

Castillejos Decl. ¶ 12, Doc. 162-2 ("According to KCC's media team, using advertising-industry standard reach calculations, the combined, net reach of the Notice Program is estimated to have reached at least 74.1% of Class Members.").

See Remijas v. Neiman Marcus Grp., LLC, 341 F. Supp. 3d 823, 829, 830 n.5 (N.D. Ill. 2018) (similarly noting that, even though the firm handling the notice had stated that notice "was seen by 71.48% of class members an average of 2.95 times each," the firm's representative had simply "provided these numbers in a signed declaration, but offered no underlying data or methodology justifying this calculation").

Despite these deficiencies, the Court finds that the Sonic Drive-In in-store notice, and the Sonic webpage and Facebook banner notices satisfy constitutional and Rule 23 standards.

The in-store notice directly targeted the affected Sonic customer group. Common sense suggests that the class members likely to remember whether they made a purchase two years ago are likely to be longtime (and continuing) Sonic customers. Further, the in-store notices were well-designed and conspicuously posted on the main customer entrance door of all affected 325 locations.

Additionally, the Sonic website and Facebook page banner were likely to reach Sonic customers, some of whom may have been Settlement Class members.

There are 3,500 Sonics nationwide. Only 325 Sonics are at issue.

Although the claims rate was somewhat low (59,953 timely claims out of an estimated 1.5 million class members) the Court finds that the notice methods and claims rate were reasonable under the circumstances. Especially considering the challenges of eliciting class member response where notice is not individually addressed, where the recovery amount is limited, and where class members may not recall a life event as insignificant as eating at Sonic.

KKC Settlement Administrator Orlando Castillejos Decl. ¶ 15, Doc. 162-2. 48,956 claims were received for Category 1 and 11,002 claims were received for Category 2. Id. ¶ 16, Doc. 162-2.

Although the risk of fraud is likely higher than usual, the Court notes that the Settlement Agreement does require the Settlement Claims Administrator to perform basic verification and fraud detection measures. Based on the unique features of this case, this is enough. D. The Settlement Is Fair, Reasonable, and Adequate

See Settlement Agreement ¶¶ 5.2-5.7, Doc. 144-2; Fairness Hearing Transcript, 6:6-7:25 (Plaintiffs' Lead Counsel representing that KCC has performed, or would perform, some fraud detection measures).

Before approving a binding settlement, the Court must conclude that it is "fair, reasonable, and adequate." Following a December 1, 2018 amendment, Rule 23(e)(2) now instructs courts to consider certain factors when deciding whether the settlement meets this standard:

(A) the class representatives and class counsel have adequately represented the class;
(B) the proposal was negotiated at arm's length;
(C) the relief provided for the class is adequate, taking into account:
(i) the costs, risks, and delay of trial and appeal;
(ii) the effectiveness of any proposed method of distributing relief to the class, including the method of processing class member claims;
(iii) the terms of any proposed award of attorney's fees, including timing of payment; and
(iv) any agreement required to be identified under Rule 23(e)(3); and
(D) the proposal treats class members equitably relative to each other.

Before this Rule 23(e)(2) amendment, circuit courts had developed their own multi-factor inquiries. According to the 2018 Amendment's Advisory Committee Notes, so long as courts use the 23(e)(2) factors as the primary framework, courts may still consider circuit-specific factors in the analysis. In the Sixth Circuit, those factors are "(1) the risk of fraud or collusion; (2) the complexity, expense and likely duration of the litigation; (3) the amount of discovery engaged in by the parties; (4) the likelihood of success on the merits; (5) the opinions of class counsel and class representatives; (6) the reaction of absent class members; and (7) the public interest."

1. Class Representatives' and Class Counsels' Adequate Representation

The Court finds that class representatives and class counsel adequately represented the class during the litigation and in settlement negotiations. The negotiations were contentious and hard fought. And class counsel secured substantial benefits for the class. The Court finds no evidence of fraud or collusion. In fact, the parties obtained the settlement with the help of a magistrate judge, which supports an absence of fraud.

Fed. R. Civ. P. 23(e)(2)(A)-(B), Advisory Committee Notes, 2018 Amendments ("[T]he focus at this point is on the actual performance of counsel acting on behalf of the class.").

Id. The Committee notes to the 2018 Amendments elaborate on pertinent things to consider relative to each of these factors.

Further, roughly eight months of discovery adequately informed the parties' negotiation. Plaintiffs knew about the important facts and relevant legal issues, such as information concerning how the breach occurred, how it was contained, and bases for determining the stores affected, and the potential class size.

Id. (explaining that "the nature and amount of discovery in this or other cases, or the actual outcomes of other cases, may indicate whether counsel negotiating on behalf of the class had an adequate information base").

None of the thirteen non-class named Plaintiffs excluded in the settlement have raised an objection. In any event, the Settlement Agreement does not bar excluded individuals from bringing suit later. The Court is satisfied that absentees are not harmed by an unwarranted class definition.

This is so despite this Court indicating its doubts about granting service awards to any non-class member plaintiffs.

The Court notes that there has not been a single objection to, or opt-out from, the settlement. This further signals that the class representatives and class counsel have adequately represented absent class members.

2. The Settlement Was Negotiated at Arm's Length

The parties engaged in substantial negotiations when seeking to settle the litigation. This included two formal, full-day mediation sessions with a Northern District of Ohio magistrate judge, after this Court's referral. They returned to mediation when there was an impasse. These were arm's length settlement negotiations.

3. Considering Various Factors, the Settlement Provides Adequate Relief

To assess the fairness of a proposed settlement, the Court "weigh[s] the plaintiff's likelihood of success on the merits against the amount and form of the relief offered in the settlement." Here, the Settlement Agreement provides monetary and injunctive relief to Settlement Class members that appears "structured to remedy all damages suffered, both actual and future." No unclaimed funds revert to Sonic.

UAW, 497 F.3d at 631 (internal quotation marks and citation omitted).

In re Target Corp. Customer Data Sec. Breach Litig., No. MDL 14-2522 (PAM), 2017 WL 2178306, at *7 (D. Minn. May 17, 2017), aff'd, 892 F.3d 968 (8th Cir. 2018).

The Court "cannot judge the fairness of a proposed compromise without weighing the plaintiff[s'] likelihood of success on the merits against the amount and form of the relief offered in the settlement." However, "our task is not to decide whether one side is right or even whether one side has the better of the[] arguments.... The question rather is whether the parties are using settlement to resolve a legitimate legal and factual disagreement." The realm of data breach litigation is complex and largely undeveloped. It would present the parties and the Court with novel questions of law. The Court does not doubt that the settlement serves to resolve the legitimate dispute between the parties and therefore this requirement is satisfied.

UAW, 497 F.3d at 631 (citation omitted).

Id.

Considering the injuries alleged, the settlement gives substantial benefits to Settlement Class members.

Further, even though Sonic changed certain security practices before the Settlement Agreement, the settlement requires Sonic to continue those practices. This is also a benefit for class members who have continued to shop at these Sonics, even if they did not submit a claim to the settlement fund.

The costs, risks, and delay of trial and appeal. The costs, risks, and delay of trial and appeal further support accepting this settlement. Data breach litigation is complex and risky. This unsettled area of law often presents novel questions for courts. And of course, juries are always unpredictable.

This settlement, by contrast, gives immediate compensation to Settlement Class members. Class interests are better served by settlement than continued litigation.

The effectiveness of the proposed method for distributing relief. The proposed claims procedure is the most effective method for distributing the benefits obtained from this settlement. As noted, Plaintiffs' estimated typical damages were small. Because locating records from a two-year-old Sonic purchase is no simple task, requiring documentary support for each claim would significantly reduce the number of claims filed.

So, the parties did not require documentation. Instead the claim form (online or paper) asked for the claimant's address and contact information, the location of the Sonic location where they made their purchase, and the last four digits of the payment card number they used to make the purchase and whether the fraud occurred before February 28, 2018 (if applicable). By signing the claim form, the claimant attested to the truthfulness of the information they had provided.

The Claim Administrator also checked claimants against lists of settlement claimants in other cases.

"Given the low value of individual awards in most consumer class actions, a sworn statement attesting to the purchase may often be sufficient documentation." Other data breach settlements have used this approach, and the Court finds that it is proper here.

Gascho v. Glob. Fitness Holdings, LLC, 822 F.3d 269, 287 (6th Cir. 2016).

See, e.g., Target, 2017 WL 2178306. Gascho, 822 F.3d at 290 ("Class counsel has provided a substantial number of citations to cases employing claims processes similar to this one, including in similar health club settlements.")

The terms of the proposed attorneys' fee award. The Settlement Agreement contains a "clear-sailing" provision—a Sonic promise not to object to a request for attorneys' fees up to one-third of the $4,325,000 aggregate fund, or reasonable costs and expenses. Sonic does not take a position on the fee application; it simply agrees not to oppose a fee application less than one-third the fund. Accordingly, the Court gives closer scrutiny to the proposed attorneys' fee award.

Gascho, 822 F.3d at 290-91 ("Neither clear sailing provisions nor kicker clauses have ever been held to be unlawful per se, but courts have recognized that their inclusion gives the district court 'a heightened duty to peer into the provision and scrutinize closely the relationship between attorneys' fees and benefit to the class.'" (quoting In re Bluetooth Headset Products Liability Litigation, 654 F.3d 935, 948 (9th Cir. 2011)).

Upon close inspection, the Court finds no reason to reject the settlement due to this "clear sailing" clause. The parties did not negotiate attorneys' fees terms until reaching an agreement on the class member benefits. Absent evidence of improper incentives, a clear-sailing provision alone does not doom the settlement.

See Fairness Hearing Transcript, 14:12-16.

UAW, 497 F.3d at 627 ("[C]ourts customarily demand evidence of improper incentives for the class representatives or class counsel—such as a promise of excessive attorney fees in return for a low-cost, expedited settlement—before abandoning the presumption that the class representatives and counsel handled their responsibilities with the independent vigor that the adversarial process demands.").

Rule 23(e)(3) agreements. Parties seeking approval must file a statement identifying any agreement made in connection with the settlement. Here, the parties represented that there was no such agreement.

4. The Settlement Agreement's Equitable Treatment of Class Members Relative to One Another

In assessing whether the Settlement Agreement treats Settlement Class members fairly vis-a-vis one another, the Court considers whether the "apportionment of relief among class members takes appropriate account of differences among their claims."

Fed. R. Civ. P. 23(e)(2)(D), Advisory Committee Note 2018 Amendments.

The Court finds that the Settlement Agreement does. The Settlement Agreement creates two categories for the recovery amounts. These two categories seem to directly track the estimated damages for a typical data breach victim, for those whose information has been compromised and those who additionally suffered fraudulent charges.

Amended Comp., Doc. 114; Ponemon Institute LLC, The Aftermath of a Data Breach: Consumer Sentiment (2014), Doc. 162-3.

E. Plaintiffs' Request for Service Awards for Settlement Class Representatives and Non-Class Named Plaintiffs

Plaintiffs seek service awards for the nine Settlement Class representatives and the thirteen non-class named Plaintiffs in amounts ranging from $1,000 to $5,500.

Incentive awards encourage class members to become class representatives and reward their individual efforts on behalf of the class. However, courts carefully scrutinize service award requests for indicators that an award has led "named plaintiffs to expect a bounty for bringing suit or to compromise the interest of the class for personal gain."

Hadix v. Johnson, 322 F.3d 895, 897 (6th Cir. 2003)

Id.

1. Request for Settlement Class Representative Service Awards

The Court finds that service awards for Settlement Class representatives are appropriate, as this is a case where public policy supports such awards. It is unlikely that these representatives' individual damages would encourage them to be named plaintiffs and, later, Settlement Class representatives.

In re Dry Max Pampers Litig., 724 F.3d 713, 723 (6th Cir. 2013) ("Where claims are worth very little, ... even a recovery in the full amount may not be enough to induce anyone to serve as a named plaintiff.").

Considering the description of Settlement Class representatives' contributions and attorney timesheet entries, these award amounts also fairly align with each representative's contributions. The Court grants the awards in the requested amounts, for a total of $15,500.

2. Request for Non-Class Named Plaintiff Service Awards

For the non-class named Plaintiffs, the evidence did not pan out as expected. Under the Settlement Agreement, these plaintiffs are not Settlement Class members and cannot recover from the common fund. Nonetheless, non-class named Plaintiffs release any claims against Sonic under the Settlement Agreement relating to the breach, and Plaintiffs still seek service awards and their behalves.

At the hearing, the Court asked Plaintiffs for additional briefing on the Court's authority to issue a service awards to the non-class named Plaintiffs. Reviewing Plaintiffs' supplemental briefing on the service awards, the Court notes that courts have occasionally issued such awards to plaintiffs who were not class representatives. But they have not given these service awards to plaintiffs who were not class members.

For this reason, the Court must deny the service awards for the thirteen non-class named Plaintiffs. The Court has no reason to doubt the genuineness of non-class named Plaintiffs' efforts and initial claims. However, none of the policy factors that support the issuance of service awards apply to the non-class named Plaintiffs.

F. Plaintiffs' Request for Attorneys' Fees

Plaintiffs moves for attorneys' fees, costs, and expenses. This Court considers two methods when considering what attorneys' fees should be paid: lodestar and the percentage-of-the-fund.

Fed. R. Civ. P. 23(h) (stating that, "[i]n a certified class action, the court may award reasonable attorney's fees and nontaxable costs that are authorized by law or by the parties' agreement" and giving four procedural requirements to follow).

Van Horn v. Nationwide Prop. & Cas. Ins. Co., 436 F. App'x 496, 497-501 (6th Cir. 2011).

The Court chooses the percentage-of-the-fund method. This method is preferred in common fund cases. In common fund cases, the attorneys' fees award "be reasonable under the circumstances."

In re Polyurethane Foam Antitrust Litig., 168 F. Supp. 3d 985, 1010 (N.D. Ohio 2016)

Van Horn, 436 F. App'x at 497-501(quoting Rawlings v. Prudential-Bache Props., Inc., 9 F.3d 513, 516 (6th Cir.1993)).

In calculating a fee award as a percentage of the common fund, courts consider the ratio between attorneys' fees and the benefit to the class. Courts enjoy discretion to define the "total class benefit" based on each case's circumstances.

Gascho, 822 F.3d at 282.

Id. at 286.

In this case, Plaintiffs seek one-third of the $4,325,000 aggregate settlement amount: $1,441,66.67. In other words, Plaintiffs claim the $4,325,000 as the total class benefit—the aggregate settlement amount that funds the class member payments, service awards, attorneys' fees and costs, and settlement administration and notice costs.

In this case, the Court agrees that this is the proper approach and finds the total class benefit to be $4,325,000.

In this data breach MDL, as in some other data breach litigation, the identities of Settlement Class members are unknown. Efforts to notify class members and weed out fraudulent claims therefore take on heightened importance, and this process usually requires above-average expenditures. In the present case, the failure to include these expenditures in the total class benefit would create a conflict: for every dollar not expended on notice and administration, a dollar is added to the class member common pool—and thus a dollar added to the "total class benefits." This increases the attorney fee award.

Using the $4,325,000 amount as the total class benefits ensures that attorneys' fees are not tied to notice and administration expenditures. It also does not mean that the overall award necessarily will be any greater; courts can adjust recovery percentage rates.

And in fact, the Court finds that Plaintiffs' request for one-third of this aggregate amount is not reasonable under this case's circumstances.

In determining appropriate attorneys' fees, courts often consider: "(1) the value of the benefit rendered to the plaintiff class; (2) the value of the services on an hourly basis; (3) whether the services were undertaken on a contingent fee basis; (4) society's stake in rewarding attorneys who produce such benefits in order to maintain an incentive to others; (5) the complexity of the litigation; and (6) the professional skill and standing of counsel involved on both sides."

Id. at 280.

Several factors support the payment of Plaintiffs' attorneys' fees. First, the settlement presents a high percentage of the total damages to the class, as estimated by an expert and a data breach survey. The claims rate was lower than hoped, but it is unclear that any alternative notice method could have improved the claim rate. Counsel should not be penalized for a low claims rate in cases where claims are inherently less likely to be made.

In re Cardizem CD Antitrust Litig., 218 F.R.D. 508, 532-33 (E.D. Mich. 2003).

G ascho, 822 F.3d at 284.

Third, Plaintiffs' counsel undertook this action on a contingent fee basis, investing large amounts of attorney time and significant discovery expenses, taking a risk that they would recover nothing. Further, the defense was well-funded, and certainly did not roll over.

Fourth, Class Counsels' efforts also deserve to be rewarded. The alleged damages at issue in a case are often "too small to justify the expense and time required to challenge the practice—both for the individual harmed and the attorney who represents that consumer." Yet Class Counsel brought the suit and succeeded.

I d.

The fifth and sixth factors—the complexity of the litigation and the professional skill and standing of both sides' counsel—weighs in favor of Class Counsel as well. This litigation was challenging. It involved laws spanning many state jurisdictions, and of course centered on unsettled data breach litigation. Plaintiffs faced stiff opposition from Defendants' counsel throughout the proceedings.

Finally, the Court considers the second factor, a cross check using the hourly rate. Plaintiff Class Counsel spent 3,530.2 hours on the case. They claim that their attorneys' fee request of $1,441,666.67 results in a lodestar multiplier of 0.85.

That hours amount that does not include the time spent after April 30, 2019 or the time counsel spent preparing the motion for attorneys' fees and expenses or any of the continuing services, like the final settlement hearing, responding to class member inquiries, and supervising the claims administrator.

Although the billing records are good overall, the records suggest that Plaintiffs' lodestar is overstated.

Concerning the attorney time spent, two items immediately stand out. The first is the time entries that bill for attorney travel. These entries total approximately $49,200 in fees, with entries reaching as high as $3,672 billed for a 7.2 hour block of travel time. Although travel time can be billable if counsel shows that billing such time is the local practice, Plaintiffs have not made any such showing.

Smith v. Serv. Master Corp., 592 F. App'x 363, 372 (6th Cir. 2014) ("The Sixth Circuit has often found travel time to be compensable if determined by the district courts to be the local practice regarding payment for travel time.") (citation omitted).

The second item is the attorney time spent opposing the MDL panel's transfer of the separate financial institution cases to this Court. When the $16,228 in attorneys' fees were accrued for this opposition, the Sonic consumer litigation had only the fairness hearing and final motions to go. The Court questions the utility of opposing the transfers, and notes that this took place during a time when work, no doubt, had slowed. Without more, the Court finds this time unreasonable.

The Court also has other concerns such as the secretarial nature of some paralegal work and some data breach statute violation time.

More concerning are the hourly rates. The Court assesses the prevailing market rate in the relevant community. The ten paralegals/office staff, assessed a mean hourly rate of $210/hour—significantly higher than the average rates reported by the paralegal association NALA in 2016. Revised to reflect a reasonable market rate for a paralegal, at rates from $45 for office staff to $145 for paralegals, the lodestar comparator is reduced by $51,765.

Id. at 369-70 (explaining that the relevant market need not be local to the venue; district court are free to look to a national market, an area of specialization market or any other market they believe appropriate to fairly compensate particular attorneys in individual cases)

NALA, 2016 National Utilization & Compensation Survey Report 21 (2016).

And this is only the paralegals. Even greater reductions are warranted for the attorney rates. The average billing rate at Lead Counsel's firm Federman & Sherwood (Oklahoma City, Oklahoma) was $553/hours. Yet attorneys' fee surveys indicate that Oklahoma City-based attorneys handling class actions had a median billing rate of $300 in 2016, and a $375/hour rate was the 95th percentile median attorney rate for all attorneys. If the Court sets the average Federman & Sherwood rate at $45o/hour—reflecting the level of legal work, the national scope of the action, and any increase in the past few years—this would reduce the overall lodestar by $168,589.

U.S. Consumer Law, Attorney Fee Survey Report 2015-16 315 (2016).

These are just a few items, and the lodestar multiplier is already a positive one. The Court need not continue further.

Considering the above factors, the Court finds that 30 percent of the $4,325,000 aggregate amount is appropriate. The Court will approve a total fee award of $1,297,500. In the Sixth Circuit, 20 to 30 percent of the common fund appears to be the typical range.

See, e.g., In re Cardizem CD Antitrust Litig., 218 F.R.D. at 532 ("The requested 17% fee is well within the 20-30% range of reasonable attorneys' fees generally awarded in this Circuit."); F & M Distribs. Inc. Sec. Litig., 95-CV-71778-DT, 1999 U.S. Dist. LEXIS 11090, at *8-10 (E.D. Mich. June 29, 1999)(awarding a 30% fee award after observing that "when using a percentage-of-the-fund approach to calculate attorneys' fees, twenty-five percent has traditionally been the benchmark standard, with the ordinary range for attorney's fees between 20-30%") (internal quotation marks and citation omitted)).

G. Plaintiffs' Request for Reasonable Costs and Expenses

The Court considers Plaintiffs' request for $311,693.53 in costs and expenses. "Recoverable out-of-pocket expenses are those incurred by the attorney which are normally charged to a fee-paying client, in the course of providing legal services, such as reasonable photocopying, paralegal expenses, and travel and telephone costs."

Waldo v. Consumers Energy Co., 726 F.3d 802, 827 (6th Cir. 2013) (citing Northcross v. Bd. Of Educ. Of Memphis City Sch., 611 F.2d 624, 639 (6th Cir. 1979)) (internal quotation marks omitted).

The amounts that Plaintiffs request generally appear to be reasonable, despite being well above the average fee and costs award in data breach litigation.

See, e.g., Consumer Pls.' Lead Counsel Decl., In re: Target Corporation Customer Data Security Breach Litigation, No. 0:14-md-02522-PAM (D. Minn.), ECF 483-1.

The computer forensic and damages experts' fees were high—$252,930.29. At the hearing, Plaintiffs' counsel attempted to justify the high damage expert expense as related to consumer polling regarding how important customers rated transaction security. This expert expense only marginally assisted settlement. The Court reduces these damage expert expenses by $75,000.

The Court, however, will not award the $27,156.77 in computerized research expenses (categorized as "Pacer" and "Research"). Class Counsel does not contend that passing on computerized legal research charges to the client is standard practice in its local legal community. The Court therefore awards $209,536.76 in costs and expenses.

Smith, 592 F. App'x at 367-69 (holding that computerized research expenses may be recoverable "[i]f distinct charges are incurred for specific research directly relating to the case, and the general practice in the local legal community is to pass those charges on to the client").

IT IS SO ORDERED. Dated: August 12, 2019

s/ James S . Gwin

JAMES S. GWIN

UNITED STATES DISTRICT JUDGE


Summaries of

In re Sonic Corp. Customer Data Sec. Breach Litig.

UNITED STATES DISTRICT COURT NORTHERN DISTRICT OF OHIO
Aug 12, 2019
CASE NO. 1:17-md-2807 (N.D. Ohio Aug. 12, 2019)
Case details for

In re Sonic Corp. Customer Data Sec. Breach Litig.

Case Details

Full title:IN RE: SONIC CORP. CUSTOMER DATA SECURITY BREACH LITIGATION

Court:UNITED STATES DISTRICT COURT NORTHERN DISTRICT OF OHIO

Date published: Aug 12, 2019

Citations

CASE NO. 1:17-md-2807 (N.D. Ohio Aug. 12, 2019)

Citing Cases

Herrick v. Nelnet Servicing, LLC

In re Rutter's Inc. Data Sec. Breach Litig., 511 F.Supp.3d 514 (M.D. Pa. 2021)…

Waid v. Synder (In re Flint Water Cases)

“novel questions,” all of which favors a finding of substantive adequacy. In re Sonic Corp. Customer Data …