Make us your home page

Millions tossed out of Sweetbay data breach suit by Maine judge

No harm, no foul, a federal judge in Maine ruled in tossing millions of shoppers out of a class-action suit seeking damages for a sweeping credit and debit card data breach at Sweetbay/Hannaford Bros. supermarkets a year ago.

That leaves only one of the named plaintiffs covered by the case, a Vermont woman never reimbursed for bogus charges when her credit card number was among 4.2 million that hackers swiped from two U.S. units of Belgian supermarket giant Delhaize Group: Sweetbay in Florida and Hannaford Bros. in New England.

While 1,800 cases of data fraud have been traced to the breach, banks and card issuers ate virtually all the counterfeit charges and changed account numbers for the overwhelming majority of the stolen card numbers. The only victims who can claim money damages are the few who actually lost money when the chain's card data network was compromised between Dec. 7, 2007, and March 10, 2008.

While U.S. District Judge Brock Hornby was not ruling on the merits of the case, his 39-page decision means the hopes of 1.6 million affected Sweetbay shoppers in Florida shifts to a Hillsborough County Circuit Court case that was revived last week. That case applies only to Florida residents. A federal appeals court peeled it off from 24 suits consolidated as one heard by Hornby in Portland, Maine.

"We think Florida law offers more remedies than Maine law," said David Metcalf, a Tallahassee attorney who filed the Tampa case. Some of his clients — including one issued a new card number — are still getting billed for fraudulent charges from the breach a year later.

Hornby called it a data fraud case because there were no allegations of identity theft, as hackers sold the card numbers to others who tried to use them to make bogus charges. Identity theft occurs when hackers gather enough personal information to open new credit card accounts in someone else's name.

Hornby's decision riled victims and privacy advocates hoping for some new legal clarity in a murky area of the fast-changing world of wireless commerce amid rising wariness over data theft. Hornby found Maine law protects only those who actually lost money because of Sweetbay or Hannaford Bros.' negligence.

Fraud and negligence laws protect purchases, but not against privacy invasions, lack of access to accounts, payment card data theft or the hassles and anxiety of card theft.

"There is no way to value and (pay for) the time and effort that consumers spent in reconstituting their bill-paying arrangements or talking to banks to explain what charges were fraudulent," the judge wrote. "Those are the ordinary frustrations and inconveniences that everyone confronts in daily life with or without fraud or negligence."

That outraged Ken Arnold, a retired St. Petersburg banker whose Discover Card number was stolen from a Sweetbay in February 2008. Discover noticed someone trying to put $312 on it in Miami a short time after Arnold used the card 225 miles away in St. Petersburg. Discover canceled the card number and told Arnold.

"How can an invasion of privacy like that just be part of everyday life?" he said. "This isn't about the money. It's time somebody tells these huge corporations the customer still means something. The judge didn't sanction Sweetbay, require they hand out coupons, apologize, compensate or even notify us well after they discovered the breach."

Mark Albright can be reached at or (727) 893-8252.

Millions tossed out of Sweetbay data breach suit by Maine judge 05/14/09 [Last modified: Friday, May 15, 2009 7:14am]
Photo reprints | Article reprints

© 2017 Tampa Bay Times


Join the discussion: Click to view comments, add yours

  1. Allegiant Air strands 200 in Las Vegas, possibly for days


    What happened in Vegas will stay in Vegas — at least until Thursday for about 200 Allegiant Air passengers who were stranded Sunday when their flight to Oklahoma City was canceled.

    About 200 Allegiant Air passengers are stranded in Las Vegas, perhaps for days. Allegiant's headquarters, shown here, is located in the Las Vegas suburb of Summerlin, Nevada.
[JAMES BORCHUCK   |   Times]

  2. Cott Corp. sells beverage manufacturing business for $1.25 billion


    TAMPA — Cott Corp., a beverage manufacturer with headquarters in Tampa and Toronto, announced Tuesday it is selling its national beverage manufacturing business to Refresco for $1.25 billion.

    Cott Corp CEO Jerry Fowden
[Handout photo]
  3. Duke Energy Florida again ranks last in J.D. Power satisfaction survey


    ST. PETERSBURG — Another J.D. Power customer satisfaction survey, another last place annual ranking for Duke Energy Florida.

    Duke Energy Florida president. Can he improve the utility's customer satisfaction ratings?
[SCOTT KEELER   |   Times file photo]
  4. Trigaux: Florida's jobless rate looks great — but 25 other state rates look even better

    Economic Development

    No debate here: Florida's unemployment rate continues to drop — even as more people move to Florida and enter the workforce. What's not to like?

    Who remembers the remarkable lines of hundreds of people looking for construction work in Tampa back in March of 2010 at a job fair at the Encore construction site near downtown Tampa? Now the construction industry is struggling to find skilled workers to meet building demand. [
  5. Last orca calf born in captivity at a SeaWorld park dies


    ORLANDO — The last killer whale born in captivity under SeaWorld's former orca-breeding program died Monday at the company's San Antonio, Texas, park, SeaWorld said.

    Thet orca Takara helps guide her newborn, Kyara, to the water's surface at SeaWorld San Antonio in San Antonio, Texas, in April. Kyara was the final killer whale born under SeaWorld's former orca-breeding program. The Orlando-based company says 3-month-old Kyara died Monday. [Chris Gotshall/SeaWorld Parks & Entertainment via AP]