Sylabs, Inc. v. Rose

Background

Sylabs alleged that defendants accessed, destroyed, or otherwise misappropriated documents from Sylabs’s servers without authorization. According to the second amended complaint, several defendants who had been employed by Sylabs resigned, took non-public information from Sylabs’s servers, founded Defendant CTRL IQ, Inc., doing business as CIQ, as a competing company, and patented technologies based on information obtained from Sylabs. Other defendants invested in CIQ.

The second amended complaint asserted two trade-secret-misappropriation claims and one claim under the Computer Fraud and Abuse Act (CFAA). The court had previously dismissed most of Sylabs’s claims and had limited the trade-secret claims to misappropriation of three specifically alleged trade secrets. The court also previously dismissed a CFAA claim, first because Sylabs had not alleged technological harm and later because Sylabs had not identified the specific CFAA provisions allegedly violated.

CFAA Claim

The defendants moved to dismiss the CFAA claim under Federal Rule of Civil Procedure 12(b)(6), which requires dismissal when a complaint does not state a legally sufficient claim for relief. The court explained that the CFAA permits a private lawsuit only when the alleged conduct satisfies one of the statutory requirements. Sylabs relied on the requirement that the violation cause at least $5,000 in loss during a one-year period.

The court held that Sylabs did not sufficiently allege that kind of loss. Under the CFAA, loss generally includes reasonable costs of responding to an offense, assessing damage, restoring data or systems, and certain interruption-related costs. The court explained that the statute focuses on technological harms caused by computer intrusions, not general injuries unrelated to the hacking.

The court found that costs for forensic analysis did not qualify as loss under the circumstances described. It also found that Sylabs’s catch-all allegation covering other costs, wages, and fees was conclusory and lacked the required specificity. Although some alleged costs might potentially qualify as response, assessment, or restoration costs, Sylabs did not describe those costs specifically, show that they exceeded $5,000, or explain that they were incurred within a one-year period. The court further stated that deleting information could constitute statutory “damage,” but not necessarily “loss,” and that the CFAA did not permit recovery for defendants’ disclosure and use of the allegedly misappropriated information.

The court dismissed the CFAA claim without leave to amend. It concluded that further amendment would be futile because the claim had been dismissed three times as insufficiently pleaded. The court also cited prejudice to defendants, including the length and lack of concision of Sylabs’s 75-page second amended complaint and Sylabs’s failure to address deficiencies and arguments identified in earlier proceedings.

Trade-Secret Claims

A group of defendants sought dismissal of the trade-secret claims to the extent they were based on alleged misappropriation of Sylabs’s “Corporate Assets” or “Data.” The court stated that it had already dismissed claims based on information outside the three specific alleged trade secrets and had not granted leave to amend those claims. Sylabs therefore could not pursue trade-secret claims based on “Corporate Assets” or “Data.” The court did not grant the defendants’ request to dismiss those portions because the claims they targeted were not live; the request was moot.

Motion to Strike

The defendants also asked the court to strike nine categories of allegations under Rule 12(f), which allows a court to remove an insufficient defense or redundant, immaterial, impertinent, or scandalous material from a pleading. The court described motions to strike as generally disfavored and declined to strike the allegations merely because the complaint was lengthy. It found that the allegations were at least tangentially related to Sylabs’s claims and that the defendants had not shown concrete prejudice. The court denied the request to strike without prejudice and required the defendants to seek the court’s permission before filing another request to strike allegations from the second amended complaint.

Disposition

The court dismissed the CFAA claim without leave to amend and denied the request to strike without prejudice. It also stated that the trade-secret claims could not extend beyond the three specific alleged trade secrets permitted by the prior order. The parties were directed to appear for an initial case-management conference on November 12, 2024, and to submit a joint case-management statement by November 5, 2024.