From Casetext: Smarter Legal Research

In re Sonic Corp.

United States District Court, Northern District of Ohio
Jul 30, 2021
1:17-md-2807 (N.D. Ohio Jul. 30, 2021)

Opinion

1:17-md-2807 MDL 2807

07-30-2021

IN RE SONIC CORP. CUSTOMER DATA SECURITY BREACH LITIGATION FINANCIAL INSTITUTIONS


ORDER

[RESOLVING DOC. 328; DOC. 394]

JAMES S. GWIN, UNITED STATES DISTRICT JUDGE

In 2017, unidentified third parties accessed Sonic customers' payment card data. The hackers obtained customer payment card information from more than three-hundred Sonic Drive-Ins. This litigation followed and the Court granted class certification.

Sonic Corporation and its subsidiaries and affiliates Sonic Industries Services, Inc., Sonic Capital LLC, Sonic Franchising LLC, Sonic Industries LLC, and Sonic Restaurants, Inc. (collectively, “Sonic” or “Sonic Defendants” or “Defendants”).

Doc. 343; Doc. 348.

Before the Court are two motions to seal exhibits, one motion from Plaintiffs and one from non-party Visa Inc. For the following reasons, the Court DENIES Plaintiffs' motion to seal and DENIES IN PART AND GRANTS IN PART Visa Inc.'s motion to seal.

Doc. 328.

Doc. 394.

I. Plaintiffs' Motion to Seal

Plaintiffs seek to file under seal summary judgment-related exhibits marked “Confidential” and “Attorney's Eyes Only” pursuant to the parties' stipulated protective order. As with earlier motions to seal in this matter, the Court denies the current motion to seal.

See Doc. 189.

The Sixth Circuit instructs that filings can only be sealed for “the most compelling reasons.” Further, while “a district court may enter a protective order limiting the use or disclosure of discovery materials” for good cause, “[a]t the adjudication stage . . . very different considerations apply.” Pleadings, briefs, and filings are given a “strong presumption in favor of openness” because they are “the sort of records that would help the public assess for itself the merits of judicial decisions.”

Kondash v. Kia Motors America, Inc., 767 Fed. App'x. 635, 637 (6th Cir. 2019) (alteration in original).

Shane Grp., Inc. v. Blue Cross Blue Shield of Mich., 825 F.3d 299, 305 (6th Cir. 2016) (citation omitted).

In re Nat'l Prescription Opiate Litig., 927 F.3d 919, 939 (6th Cir. 2019) (citing Shane Grp., 825 F.3d at 304-05 (6th Cir. 2016)).

“[I]n civil litigation, only trade secrets, information covered by a recognized privilege (such as the attorney-client privilege), and information required by statute to be maintained in confidence (such as the name of a minor victim of a sexual assault), [are] typically enough to overcome the presumption of access.”

Shane Grp., 825 F.3d at 308.

The party moving to seal documents has the heavy burden of demonstrating: “(1) a compelling interest in sealing the records; (2) that the interest in sealing outweighs the public's interest in accessing the records; and (3) that the request is narrowly tailored.” In a class actions “particular strictness” applies to “the standards for denying public access to the record.”

Kondash, 767 Fed. App'x. at 637 (6th Cir. 2019).

Shane Grp., 825 F.3d at 305 (citation omitted).

Generalized arguments for sealing are insufficient. The Sixth Circuit requires that parties seeking to seal documents must “analyze in detail, document by document, the propriety of secrecy, providing reasons and legal citations.” Here, the parties offer no such detailed “document by document” sealing justification.

Id. (citation omitted).

Here, Plaintiffs have not provided an explanation or evidence that they have a compelling interest in sealing their Opposition brief and exhibits. With only the parties' own “Confidential” or “Attorney's Eyes Only” designation as guidance, the Court does not find that the documents should be sealed. Plaintiffs also state that they “would not oppose a request from Sonic or Order from the Court directing the exhibits be filed on the public docket.”

Doc. 328 at 2.

Plaintiffs' motion to file its summary judgment-related documents and exhibits under seal is denied.

II. Visa Inc.'s Motion to Seal

Non-party Visa Inc. also asks the Court to allow Plaintiffs to file under seal their summary judgment-related Exhibit EEE. Exhibit EEE is a copy of an “Event Qualification Summary Under The Visa Global Compromised Account Recovery (GCAR) Program” “prepared in connection with” the Sonic data breach. Visa explains that the Qualification Summary document contains “highly commercially sensitive” information. Visa is concerned about potential competitive harm if the Qualification Summary is publicly disclosed.

Doc. 394 (referencing Doc. 368-7).

Doc. 394 at 1.

Id. at 2.

Visa's motion describes the Qualification Summary's contents, and the Court uses that description to determine which aspects of the exhibit appears to contain proprietary information that Visa does not need to disclose. Briefly, the Qualification Summary may be redacted to exclude information about Visa, Inc.'s internal processes and standards, but information pertaining to the Sonic data breach is of greater interest to both the public and the Court in this matter.

Kondash, 767 Fed. App'x. at 638 (“While the existence of a trade secret will generally satisfy a party's burden of showing a compelling reason for sealing documents, even if a trade secret does not exist, a court may still find a compelling reason exists; further, even if a district court finds that a trade secret exists, it must still determine whether public interest outweighs the moving party's interests in protecting their trade secret.”).

Plaintiffs may redact information regarding “details of Visa's internal systems, databases, ” Visa's “processes for analyzing . . . sensitive cardholder account information, descriptions of Visa's contractual rules with its clients, [and] Visa's application of the confidential processes of its proprietary GCAR program.” Any Visa-customer personal information, such as names, addresses, or account information, may be redacted if it is included in the Qualification Summary. The Court recognizes that these aspects of the Qualification Summary may contain Visa's proprietary information.

Doc. 394 at 3.

Plaintiffs may not redact “confidential information regarding Sonic's data security practices and results of a forensic investigation conducted by an independent forensic investigator, highly sensitive information about overall fraud and counterfeit fraud transactions reported by Visa Issuers regarding certain accounts that transacted at Sonic during relevant time frames, and the number of accounts impacted across Visa Issuers.”The Court does not find evidence that disclosing these aspects of the Qualification Summary will put Visa at a competitive disadvantage.

Id.

III. Conclusion

For the foregoing reasons, the Court DENIES Plaintiffs' motion to seal, and DENIES IN PART AND GRANTS IN PART Visa Inc.'s motion to seal.

ITS IS SO ORDERED.


Summaries of

In re Sonic Corp.

United States District Court, Northern District of Ohio
Jul 30, 2021
1:17-md-2807 (N.D. Ohio Jul. 30, 2021)
Case details for

In re Sonic Corp.

Case Details

Full title:IN RE SONIC CORP. CUSTOMER DATA SECURITY BREACH LITIGATION FINANCIAL…

Court:United States District Court, Northern District of Ohio

Date published: Jul 30, 2021

Citations

1:17-md-2807 (N.D. Ohio Jul. 30, 2021)