Attias v. CareFirst, Inc.

Plaintiffs, a group of CareFirst customers, filed a putative class action after CareFirst suffered a cyber attack in which its customers' personal information was allegedly stolen. The D.C. Circuit reversed the district court's dismissal of the complaint based on lack of standing. In this case, because the district court dismissed for lack of subject-matter jurisdiction without expressly inviting plaintiffs to amend their complaint or giving some other equally clear signal that it intended the action to continue, the order under review ended the district court action, and was thus final and appealable. On the merits, the court held that plaintiffs have standing where the fact that plaintiffs have reasonably spent money to protect themselves against a substantial risk created the potential for them to be made whole by monetary damages. View "Attias v. CareFirst, Inc." on Justia Law