In Re: Hannaford Bros Co. Cust

Hackers breached the security of the database for the grocery store where plaintiffs shop. The district court determined that plaintiffs failed to state a claim under Maine law for breach of fiduciary duty, breach of implied warranty, strict liability, and failure to notify customers. Although the court concluded that plaintiffs adequately alleged breach of implied contract, negligence, and violation of the unfair practices portion of the Maine Unfair Trade Practices Act, it dismissed those claims because alleged injuries were too unforeseeable and speculative to be cognizable under Maine law. The First Circuit affirmed in part, but reversed dismissal of the negligence and implied contract claims. Mitigation damages are available under those claims, for card replacement costs and credit insurance.