Slashdot Mirror


Heartland Security Breach Class Action: Victims $1925, Lawyers $600,000

Fluffeh writes "Back in 2007, Heartland had a security breach that resulted in a 130 million credit card details being lifted. A class action suit followed and many thought it would send a direct message to business to ensure proper security measures protecting their clients and customers. With the Heartland case now over and settlements paid out and divided up, the final breakdown is as follows: Class members: $1925 (11 cases out of 290 filed were 'valid'). Lawyers for the plaintiff class action: $606,192. Non-Profits: around $1,000,000 (The Court ruled a minimum of $1 million in payouts). Heartland also paid its own lawyers around $2 million. Eric Goldman (Law Professor) has additional commentary on his Law Blog: 'The opinion indicates Heartland spent $1.5M to advertise the settlement. Thus, it appears they spent over $130,000 to generate each legitimate claim. Surprisingly, the court blithely treats the $1.5M expenditure as a cost of doing business, but I can't wrap my head around it. What an obscene waste of money! Add in the $270k spent on claims administration, and it appears that the parties spent $160k per legitimate claimant. The court isn't bothered by the $270k expenses either, even though that cost about $1k per tendered claim (remember, there were 290 total claims).'"

43 of 163 comments (clear)

  1. Re:the court should not care about costs... by poetmatt · · Score: 4, Insightful

    $2k total out of almost $4m on the case is *justice* when being sued for a credit card breach?

  2. This is _all_ class action lawsuits! by Kid+Zero · · Score: 3, Informative

    Most of them end up with the actual aggrieved getting $20 and the lawyers getting the six-figure payout.

    1. Re:This is _all_ class action lawsuits! by Theaetetus · · Score: 4, Insightful

      Most of them end up with the actual aggrieved getting $20 and the lawyers getting the six-figure payout.

      Most of them take years and the lawyers don't get paid until the end. What's wrong with someone getting a six-figure payout for, as in this one, 5 years of work? Particularly when that six figure payout is divided among all of the lawyers on the team, their paralegals, their secretaries, their IT guy, etc.? You think IT guys should have to work for free?

    2. Re:This is _all_ class action lawsuits! by TheRaven64 · · Score: 3, Interesting

      The point of class action lawsuits is not to give a return for the victims, it's to punish people and companies that do a very small amount of harm to a lot of people. There's no point in suing over damages of $10, and little point over $100 unless you can do it in the small claims court and you're unemployed. Even asking a lawyer if it's worth going to court will probably cost more than you'll get back. If someone does something that causes damages worth $10 each to a million people though, that can be quite profitable if none of them is going to sue to recover their loss. If they did all go through the small claims courts, then this would be quite an effective DDoS on the legal system, so it's far from ideal. The class action suit is meant to cost the company enough to discourage this behaviour. If spending about $5m and a load of bad publicity costs more than properly securing your server, then it sounds like it worked just fine in this instance.

      --
      I am TheRaven on Soylent News
    3. Re:This is _all_ class action lawsuits! by Richard_at_work · · Score: 2

      Thats because in a class action lawsuit, the lawyers are the ones doing the work for you...

      Why shouldn't they get paid? You can always bring your own suit against the plaintiffs rather than take part in their suit....

    4. Re:This is _all_ class action lawsuits! by Anonymous Coward · · Score: 2, Funny

      I thought that we did.

    5. Re:This is _all_ class action lawsuits! by trout007 · · Score: 3, Insightful

      What is wrong IMHO is that the lawyers get to put people in the Class by default. You have to specifically sign a document to be removed from the class. Most people just throw those away because they are long and confusing. It would be different if the lawyers had to advertise and convince you to be a part of the class. This could be handled much easier by people taking these companies to small claims court.

      --
      I love Jesus, except for his foreign policy.
    6. Re:This is _all_ class action lawsuits! by Theaetetus · · Score: 4, Informative

      What is wrong IMHO is that the lawyers get to put people in the Class by default. You have to specifically sign a document to be removed from the class. Most people just throw those away because they are long and confusing. It would be different if the lawyers had to advertise and convince you to be a part of the class. This could be handled much easier by people taking these companies to small claims court.

      Except that it couldn't... The damages for any individual person may be only that $2k... Are you willing to spend two or three weeks producing documents, responding to delaying motions from the other side, attending depositions, arguing in court, filing motions of your own, etc. for $2k? Or, where could you find a lawyer to do that work for you for those weeks for 33% of your $2k compensation?

      You can't. Which is why these small suits would almost never (and, prior to class action suits, did never) get filed. And the companies know this - they know if they do something slightly evil and take a few pennies or dollars from each customer, those customers aren't going to spend the time or money to bring suit, so they'll just let it slide... and with enough customers, that company can make millions upon millions. Call it the Superman III tactic.

      And incidentally, elsewhere in the comments, people mention the one woman who took Toyota to small claims court over her Prius mileage, and how, since she won, there's no need for lawyers and everyone can do the same thing. What they don't mention is that she was an unemployed lawyer with plenty of time to sit in court.

    7. Re:This is _all_ class action lawsuits! by Theaetetus · · Score: 3, Insightful

      If they didn't think the odds of them making a reasonable return on the suit were good they wouldn't start it in the first place. There is something distinctly wrong with people being able to start a legal action, with me as a plaintiff without my permission. Yes it is possible that they are representing the interests of all plaintiffs to the best of their ability, not abusing the huge leeway to put their own interest first. The opposite is also patently true.

      What's distinctly wrong about it? Consider, your state attorney general may bring an action against a company doing, say, illegal dumping. The attorney general isn't representing himself, he's representing the interests of all of the people in the state. In fact, the full title of these actions are frequently "the People of the State of X v. EvilCorp." Is that distinctly wrong, even though the attorney general didn't knock on your door and get you to sign on? Or is it somehow different and only distinctly wrong when the government's not involved?

      Class action suits are not about compensation, they're about deterring the company from being evil. So the plaintiffs get a $20 check... would they have brought suit on their own for that $20? Or even $50? What about even $2000, as in this article? Would you take weeks off of work to spend those same weeks flying across the country to visit EvilCorp and spend hours taking depositions of their corporate board, digging through thousands of pages of emails looking for one smoking gun, hiring experts to investigate, filing repeated motions in court to oppose their motions, arguing for several days at trial, etc., for $2000? Hell, no. And so, absent class action suits, EvilCorp would get away with screwing you out of $2000, screwing me out of $2000, screwing Bob and Joe and Fred and John out of $2000 each, etc. A couple thousand here and a couple thousand there, and suddenly you're talking real money. Because none of us have the time or money to pursue such a small payout individually, they get away with screwing consumers out of millions and millions of dollars.

      In a class action suit, however, the attorneys are acting as private attorneys general. The point is not getting everyone compensated with a $2000 check, the point is punishing the company for screwing their customers and making it so costly that they won't do it again.

  3. Sad state of affairs by Morris+Thorpe · · Score: 2

    This is sickening. No one in their right mind would argue otherwise. When lawyers make the rules (be it through lobbies or becoming lawmakers themselves), they favor their kind.
    We're becoming more and more a society in which the do-nothings make out like bandits. That can't last much longer, can it?

    Look at the google ads that came up on this page,

    Injury Compensation Claim
    How Much Is Your Injury Worth? Free Evaluation With An Attorney!
    Get Cash From Lawsuit Now
    Don't Wait For Settlement-Get Cash Now-If You Don't Win-You Pay Zero!
    Medical Malpractice Case
    Pain & Suffering from Your Injury? Talk to a Local Attorney for Free.

    1. Re:Sad state of affairs by s73v3r · · Score: 3, Insightful

      This is sickening. No one in their right mind would argue otherwise.

      Unless, you know, you actually did the math. $600k over 5 years. How much did they have to front for staff salaries? How much did they have to front for transportation? How much did they have to front for other expenses relating to the case?

      Are you under the impression that we should cap their salaries, and thus make it so no one wants to take these cases on, and therefore classes of people who are wronged, but not hugely, should just shrug it off, allowing the companies to continue to do that shit?

  4. Re:the court should not care about costs... by Anonymous Coward · · Score: 4, Informative

    I don't know... I think the article summed it up pretty nice:

            Actual victims got: $1925
            Heartland spent $1.5 million to find the people to give out that $1925.
            Somewhere around $998,075 goes to non-profits
            The lawyers who brought the lawsuit? They got $606,192.50. For helping 11 people get less than $200 each.

    Nice work if you can get it.

  5. This woman took Honda to small claims court. by trout007 · · Score: 4, Interesting

    This lady opted out of a class action and took Honda to small claims court and won.
    http://www.insurancejournal.com/news/west/2012/02/03/234115.htm

    --
    I love Jesus, except for his foreign policy.
  6. Re:the court should not care about costs... by HBI · · Score: 2, Interesting

    That might be the most idiotic thing I have ever read. What constitutes justice about paying money to a infinitesimal minority of the total affected people? What is justified about paying lawyers a salary for this boondoggle? You're trying to imply there was nothing better that could have been done with millions of dollars?

    The courts shouldn't care about costs. Right. That's a pretty stupid attitude.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  7. Class action or extortion? by Troyusrex · · Score: 2

    No one expects the lawyers to work for free but the lack of a true plaintiff in class action suits creates a situation where the lawyers can strike a deal best for them and not the client. What we need is the ability to class action sue lawyers for unfairly enriching themselves via class action suit...

  8. Lawyers by tkrotchko · · Score: 4, Insightful

    Laws are written by lawyers, administered by lawyers, and judged by lawyers.

    You can't understand laws without lawyers, you can't hope to defend yourself in court without a lawyer.

    You do realize the system is set up to require a lawyer, right?

    And no lawyer has any real stake in simplifying or reducing the input of lawyers.

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
    1. Re:Lawyers by IgnoramusMaximus · · Score: 3, Insightful

      Lawyers in modern society fulfill the same role as the various priests and shamans fulfilled in the societies of old: control of access to the "deity" in fashion (in this case the fabled, never seen, mythical "Justice"). Overtly it is to "help" the sheep to access the deity in question, but in reality it is of course merely to satisfy avarice of the priests and their hunger to wield power over others. That is also the reason why priests are always attempting to control politics - in the old days by manipulating pharaohs, kings, emperors and the like or even becoming kings themselves (also see under "The Pope") - but in the modern times they dispensed with intermediaries and half measures and simply took the power directly, in the so called "republics" and "democracies" in which invariably at least two thirds of the power structure consists of the pries ... err ... lawyers.

      And no lawyer has any real stake in simplifying or reducing the input of lawyers.

      Which is of course the golden rule of all parasitic priesthoods.

      Also note that, just like lawyers, all the priests and shamans in history always claimed to only want to "help" their victims and thus always argue themselves "indispensable" to whatever society they happen to prey on.

      Why do you think priests always insist on making the rules of the interaction with the "deity" as arcane as possible? As an example: most of history the Christian priests insisted on having their Bible in a language that common people could not read and which had to be "interpreted" for them, just as modern lawyers insist on "legalese" for the same very reasons. Unlike the Catholic priests however, modern lawyers resort to the methods of other, older, priesthoods by ever expanding and complicating (never simplifying, as you noticed) their arcane manuscripts and rituals. This is because the Judeo-Christians have essentially hobbled themselves with the idea of a "Holy Book", which offers limited room for expansion (although several of the "one, only and 100% true" improvements and revisions have been produced). Fortunately for the Christian priests, the original writers made the thing ambiguous, self-contradictory and - most importantly - voluminous enough to satisfy the purpose it was intended for.

      As to "justice", the very first test to see if a society has any is to see if making offerings to and groveling before a priest, i.e. a "lawyer", is a pre-requisite for its supposed dispensation.

      Note also how promise of "justice" is a key element in most religions and how much emphasis is placed on it by the religion's priests.

  9. Re:the court should not care about costs... by Theaetetus · · Score: 4, Insightful

    That might be the most idiotic thing I have ever read. What constitutes justice about paying money to a infinitesimal minority of the total affected people?

    Because the total affected people were barely affected, and none of them would have been able to get a lawyer to fight this individually for them.

    What is justified about paying lawyers a salary for this boondoggle?

    They fronted the expense for the lawsuit and fought it... for 5 years. They managed to catch the company doing something really, really wrong, fought them in court, and won, forcing the company to change their ways. What isn't justified about paying them for that 5 years of work?

    You're trying to imply there was nothing better that could have been done with millions of dollars?

    I'm sure the company's CEO would have liked to buy another jet with it.

    The courts shouldn't care about costs. Right. That's a pretty stupid attitude.

    Thinking lawyers shouldn't get paid when they force a company to stop being evil is a pretty stupid attitude, too.

  10. When will Americans demand change? by MikeRT · · Score: 5, Interesting

    The time has come for the legal profession to become fully accountable to the public like the rest of the white collar professions. Lawyers should not sit on the Bar associations; businessmen, doctors, engineers, etc. should be the ones judging the professional conduct of lawyers. Lawyers have little to no education in these matters but deem themselves fit to judge every facet of how we do our work. Why is it then so outrageous to think that similarly intelligent and educated people from different fields should be the ones judging their ethics, billing practices, etc.?

  11. Re:that's the free market for you libertarians by trout007 · · Score: 5, Insightful

    The current system of class action lawsuits is not libertarian. It is an opt out system. The plaintiffs get to include you in the class seeking the lawsuit without your permission. This is completely backwards on how it would work in a free system. In a free system a plaintiff could ask if you want to join them and you are free to do so. The current system is only supported by regulations that allow a plaintiff to include you without your consent. They just send you a very lengthy scary legal letter that you have to sign to opt out. Most people including myself don't sign them because I don't want to read 20 pages of legal jargon and sign my name to it.

    --
    I love Jesus, except for his foreign policy.
  12. Re:the court should not care about costs... by sunderland56 · · Score: 5, Insightful

    And a grand total of $0 towards preventing any future data breaches.

    A fair settlement in any data loss case would include significant steps taken towards preventing the same thing from happening again.

  13. Re:the court should not care about costs... by rgbrenner · · Score: 3, Informative

    meh... I don't know... there's a reason the court was ok with awarding $2k to those 11 people.

    Fact is, when your credit card is stolen, by law you're limited to paying $50 (and most bank's don't even ask you to pay that). Everything else is recovered from the merchants who accepted the fraudulent charges, and removed from the credit card balance. The bank then replaces the credit card (something Heartland would have been responsible for paying for as part of their merchant agreement).

    If your bank removed all of the fraudulent charges, then you do not have a loss. Courts cannot reimburse you for fictional or imaginary losses. Furthermore, this isn't your social security number... when the credit card is replaced, the card number is changed, which means there won't be any additional fraudulent charges.

    $2k is probably what those 11 people could prove they were out as a result of the breach.

  14. Re:that's the free market for you libertarians by Jawnn · · Score: 4, Funny

    Absolutely right. Any legal system is anti-libertarian. Mob rule, now that's libertarian justice!

  15. Re:end class action suits! by trout007 · · Score: 2

    Or we could make small claims court easier and cheaper. Then people could take these big companies to court themselves. It would be much more expensive to fight 1000 small claims cases then to fight one big case.

    --
    I love Jesus, except for his foreign policy.
  16. Re:that's the free market for you libertarians by __aaltlg1547 · · Score: 3, Insightful

    The legal system is anything but a free market. This is a big payout scheme for lawyers, using public authority as a lever to make a bad-acting company pay off those who were never harmed.

    It looks like a corrupt judge to me. How much of the $600k found it's way back to his pocket?

  17. Re:the court should not care about costs... by __aaltlg1547 · · Score: 3, Interesting

    If the point of the trial is to determine guilt and punishment, that should be a job for criminal court. Civil courts exist to compensate those harmed, not just their lawyers.

    I'd like to see reform of the system to dictate a maximum payout to plaintiff's lawyers of less than 25% of the amount awarded to plaintiffs.

  18. Re:the court should not care about costs... by Fluffeh · · Score: 4, Insightful

    If your bank removed all of the fraudulent charges, then you do not have a loss.

    As someone who has had a fraudulent charge on my account, and as the person who submitted this story, I am amazed by your statement. I chased my (previous) bank for three weeks, made numerous phone calls and had to go into a branch twice to get my account re-imbursed the charges. If you can call that "no loss" then you must clearly place exceptionally little value on your own time and effort. Even if the bank reimbursed me for my time at my normal salary-per-hour rate, it would have been substancially more than the measly $200 that Heartland paid out to these 11 "valid" claims.

    I am also quite curious about how you can claim that out of 130,000,000 credit card details that were stolen, a $2,000 settlement to victims who were really "found" is okay. People who pinch credit card details don't do it because they are bored. They don't do it to see if they can. Someone clever enough to do this sort of operation is very much likely going to sit on the cards for a while, then charge them $1 each with a statement comment of "interest fee" or "aministration fee", sell them to others for a pittance in bunches and have them see what they can rifle through before they are caught (which means that countless individuals again go through a laborious process of showing that it wasn't them spending the cash) or any other number of means to money without getting caught. I would have hoped that this class action case would have been a resounding "Pay attention to security of your customers, else it will cost you a LOT of money" message to all the other merchants out there, but sadly it has been much more of a "Meh, you win some, you lose some, you still foot the bill to the customers in the long run..." message. It is nothing short of shameful.

    --
    Moved to http://soylentnews.org/. You are invited to join us too!
  19. Re:the court should not care about costs... by rgbrenner · · Score: 4, Informative

    I chased my (previous) bank for three weeks, made numerous phone calls and had to go into a branch twice to get my account re-imbursed the charges

    I would suggest changing banks then. I've had my credit card stolen too. I called my bank, they refunded the charge to the card while they investigated, and sent me a letter to sign. Received it a week later, signed it (1 statement, and a checkbox, IIRC), and sent it back. Received a replacement card about the same time. About 6 week later, they sent me a letter saying they finished the investigation, and removed the charge from the account.

    I am also quite curious about how you can claim that out of 130,000,000 credit card details that were stolen, a $2,000 settlement to victims who were really "found" is okay.

    The lawyers spent $1.5m contacting each of those people asking if they had any losses. 11 is all they could find.

    And it isn't like these 130 million people aren't known. After the breach, auditors, forensic investigators come in.. The banks know who each and everyone of these people are. It would have all been disclosed after the breach was discovered.

  20. Re:the court should not care about costs... by JaredOfEuropa · · Score: 2

    Interestingly, if the company had decided to just pay all 290 claimants their $2000 and not pay the laywers anything, they would have had around $1.5 million to blow on executive bonuses.

    --
    If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
  21. Re:the court should not care about costs... by jedidiah · · Score: 2

    ...except you are neglecting the actual breach.

    You are also glossing over the actual cost of litigating this.

    This is basic pro-corporate propaganda.

    It would be nice if there were some criminal cause of action here and the relevant prosecutor(s) actually cared. In the absence of that, the only thing keeping the Soylent Corporation at bay is some self-interested lawyer.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  22. Lincoln's advice to lawyers by coldsalmon · · Score: 4, Interesting

    "Discourage litigation. Persuade your neighbors to compromise whenever you can. Point out to them how the nominal winner is often a real loser -- in fees, expenses, and waste of time. As a peacemaker the lawyer has a superior opportunity of being a good man. There will still be business enough."

    --Abraham Lincoln

  23. Re:the court should not care about costs... by ChrisMaple · · Score: 2

    I'd guess that very few people with recurrent credit card billing have more than a half dozen organizations involved with that. Most of those can be updated via the internet. Less than an hour and the job's done. It's something that has to be done every few years anyway, as the expiration date changes.

    --
    Contribute to civilization: ari.aynrand.org/donate
  24. Re:the court should not care about costs... by gshegosh · · Score: 4, Insightful

    I'd like to see reform of the system to dictate a maximum payout to plaintiff's lawyers of less than 25% of the amount awarded to plaintiffs.

    And who would write a bill to reform the system? Lawyers?

  25. Re:the court should not care about costs... by Theaetetus · · Score: 4, Informative

    I don't know... I think the article summed it up pretty nice:

    Actual victims got: $1925

    Heartland spent $1.5 million to find the people to give out that $1925.

    Somewhere around $998,075 goes to non-profits

    The lawyers who brought the lawsuit? They got $606,192.50. For helping 11 people get less than $200 each.

    Nice work if you can get it.

    The lawyers who brought the lawsuit got $606k for helping 11 people get $2k and helping nonprofits get $1000k. Oh, and those lawyers spent 5 years doing it. And they had to pay all the costs up front, so don't forget the compound interest. And they have to pay their paralegals, staff, IT guy, rent, etc. for those 5 years. The individual lawyers probably ended up making about $20-30k per year. Not nearly as nice work, unless you can take on five or six of these at once.

  26. Re:the court should not care about costs... by nomadic · · Score: 2

    it could be settled in a matter of weeks or a month or two

    Do you have experience litigating complex cases?

  27. Re:the court should not care about costs... by nomadic · · Score: 2

    "Nice work if you can get it." For making $606,192.50 over FIVE YEARS? Consider how many thousands of hours they had to spend on the case, that doesn't sound like nice work at all.

  28. Re:the court should not care about costs... by nomadic · · Score: 3, Insightful

    As a lawyer who has worked on large class actions, it's difficult to settle early. First, corporate defendants usually won't even consider settling until the case has gone on long enough for them to realize they did something wrong. Second, it's unethical to even make a settlement offer on the plaintiff's side unless you know how many people were affected, and the approximate damages they suffered, which can take a long time to figure out. Also, to foreclose accusations of thievery and predation, no, they weren't "coupon" cases, I never got rich working on class action cases, and in every single case I was involved many, many class members recovered far more than I made.

    "But why should the class action lawyers settle? The longer they drag out the case, the more money they get - regardless of the benefit to the victims."

    Not really, if it's a contingency case, which they usually are.

  29. Re:end class action suits! by Lehk228 · · Score: 2

    small claims court is already easy and cheap

    --
    Snowden and Manning are heroes.
  30. Re:that's the free market for you libertarians by Jawnn · · Score: 3, Insightful

    Sadly, I am not joking. If this forum is any indicator, the vast majority of self-described "libertarians" are seriously (if ignorantly) advocating anarchy. In their unicorns-are-real world, no regulation is good and the "free market" will take care of all ills. Part of me wants to see the world become what they clamor for, just to see the bigger gangs eat their food and then kill them, right after having done the same to all of the self-described anarchists.

  31. Re:that's the free market for you libertarians by s73v3r · · Score: 2

    Yeah, no. This is about as "Free Market" as it gets. The lawyers for both sides set their rates before going in.

    pay off those who were never harmed.

    Go fuck yourself and your "I get to decide who was harmed" bullshit.

  32. Re:the court should not care about costs... by s73v3r · · Score: 2

    Do you expect the lawyers to work for free? Seriously, how much time do you think they spent on this case? Do you think they were paid the entire time they were working on it? Odds are they weren't.

  33. Re:the court should not care about costs... by s73v3r · · Score: 2

    I'd like to see reform of the system to dictate a maximum payout to plaintiff's lawyers of less than 25% of the amount awarded to plaintiffs.

    While we're at it, I'd like to see reform of your industry to cap your pay at a tiny amount as well.

    That staff of lawyers were awarded $600k after 5 YEARS of work. They weren't being paid by these people in the meantime. Sliced up, and after paying rent on their offices, and for the rest of their staff, that's not a whole hell of a lot.

  34. Re:the court should not care about costs... by nomadic · · Score: 2

    "The judge would not judge something too defavorable to the lawyer, just to avoid setting bad precedent (better a justice that favor the lawyers than impunity, no?)."

    Judges have absolutely no problem knocking down legal fees if they think they're too high. You think a judge who took a huge paycut when he left private practice is going to go out of his way to give a windfall to some lawyer who probably annoyed him during the litigation?