E-Commerce Platform Data Breach Settlement Receives Final Court Approval

• Published date: 15 November 2021
• Subject Matter: Litigation, Mediation & Arbitration, Court Procedure, Trials & Appeals & Compensation
• Law Firm: Squire Patton Boggs LLP
• Author: Ms Kristin L. Bryan

CPW previously covered the Drizly data breach litigation. In that case, this month a federal court in Massachusetts granted final approval to a class settlement in the absence of any objections. Barr v. Drizly, 2021 U.S. Dist. LEXIS 217158 (D. Mass. Nov. 4, 2021). Read on to learn more.

As a recap, Drizly operates an online e-commerce platform that facilitates the delivery of alcoholic beverages from local retailers. The litigation, Barr v. Drizly, LLC, Case No. 1:20-cv-11492 (D. Mass.), concerned a data event which Plaintiffs alleged resulted in consumers' information, including at least email addresses, dates of birth, hashed passwords, delivery addresses, phone numbers, and IP addresses, to be improperly exposed to third parties on the dark web. The data event was allegedly the result of a targeted attack that occurred around February 2020, but was not identified by Drizly until the end of July 2020.

Under the terms of the settlement approved by the Court, each eligible Class Member that files a timely and valid Proof of Claim and Release ("Claim Form") will receive an individual cash payment of $14.00, that may be adjusted upward if the total amount due to all Authorized Claimants does not exceed $1,050,000, and adjusted downward in the event that the aggregate cash payments to all Authorized Claimants exceeds $3,150,000. Additionally, Class Members will also receive a pro rata portion of a pool of up to $447,750 in the form of a credit against the cost of service fees for future orders from Drizly. Finally, Drizly will also implement and maintain for a two-year period certain security measures.

In granting final approval, the Court found (solely for purposes of settlement), that the requirements of Federal Rule of Civil Procedure Rule 23(a) and (b)(3) were satisfied such that:

(i) the Settlement Class was so numerous that joinder of all Settlement Class Members is impracticable (as required under Fed. R. Civ. P. 23(a)(1));

(ii) common questions of law and fact existed with regard to the Settlement Class (as required under Fed. R. Civ. P. 23(a)(2));

(iii) Plaintiffs' claims in this litigation were typical of those of Settlement Class Members (as required under Fed. R. Civ. P. 23(a)(3)); and

(iv) Plaintiffs' interests do not conflict with those of absent Settlement Class Members, all of whose claims arise from the same factual predicate, and Plaintiffs and Class Counsel have adequately represented...