Accellion Inc.: Accellion Beats Breach Victims’ Bid to Modify Class Damages

Accellion Data Breach Litigation: Court Rejects Plaintiffs’ Bid to Expand Class Damages

A federal court has denied plaintiffs’ attempt to modify a class certification order in litigation stemming from a 2020–2021 data breach involving Accellion Inc.’s file-transfer software. Judge Edward J. Davila of the U.S. District Court for the Northern District of California ruled that the plaintiffs failed to present new evidence or legal arguments justifying reconsideration of the original decision, which limited class damages to nominal amounts.

The case centers on cyberattacks targeting Accellion’s legacy File Transfer Appliance (FTA) software, which exposed sensitive data from numerous organizations. Despite allegations of harm, the court upheld its prior certification of subclasses for nominal damages only, striking the plaintiffs’ renewed motion.

The ruling underscores the challenges plaintiffs face in securing broader compensation in data breach litigation, particularly when courts determine that demonstrated harm is insufficient to warrant expanded damages. The decision leaves the original class structure intact, with no further modifications granted.

Source: https://news.bloomberglaw.com/daily-labor-report/accellion-beats-breach-victims-bid-to-modify-class-damages

Kiteworks cybersecurity rating report: https://www.rankiteo.com/company/kiteworkscgcp

"id": "KIT1783621749",
"linkid": "kiteworkscgcp",
"type": "Breach",
"date": "1/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Numerous organizations',
                        'industry': 'Technology (File Transfer Software)',
                        'name': 'Accellion Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Exploited vulnerability in legacy software',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive data'},
 'date_detected': '2020',
 'description': 'A federal court has denied plaintiffs’ attempt to modify a '
                'class certification order in litigation stemming from a '
                '2020–2021 data breach involving Accellion Inc.’s '
                'file-transfer software. The court ruled that the plaintiffs '
                'failed to present new evidence or legal arguments justifying '
                'reconsideration of the original decision, which limited class '
                'damages to nominal amounts. The case centers on cyberattacks '
                'targeting Accellion’s legacy File Transfer Appliance (FTA) '
                'software, which exposed sensitive data from numerous '
                'organizations.',
 'impact': {'data_compromised': 'Sensitive data',
            'legal_liabilities': 'Litigation and potential fines',
            'systems_affected': 'Accellion File Transfer Appliance (FTA)'},
 'investigation_status': 'Ongoing litigation',
 'post_incident_analysis': {'root_causes': 'Vulnerabilities in legacy File '
                                           'Transfer Appliance (FTA) software'},
 'references': [{'source': 'U.S. District Court for the Northern District of '
                           'California'}],
 'regulatory_compliance': {'legal_actions': 'Class action litigation'},
 'title': 'Accellion Data Breach Litigation',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Accellion File Transfer Appliance (FTA) software '
                            'vulnerabilities'}