Justice Shirley Kornreich recently issued one of the few New York state court decisions that address the Computer Fraud and Abuse Act (“CFAA”). Spec Simple, Inc. v. Designer Pages Online LLC, No. 651860/2015, 2017 BL 160865 (N.Y. Sup. Ct. May 10, 2017). The CFAA criminalizes both accessing a computer without authorization and exceeding authorized access and thereby obtaining information from any protected computer. Id. at *3 (citing 18 U.S.C. § 1030(a)(2)(C)). The CFAA also provides a civil cause of action to any person who suffers damage or loss because of a violation of the CFAA. Id. at *4 (citing 18 U.S.C. § 1030(g)). As discussed below, the decision provides a helpful look into the interpretation of CFAA claims in the future.
Background
Spec Simple operates computer databases that are used by architectural, interior design, engineering, facility management, and furniture professionals. Id. at *1. According to Spec Simple, its databases provide companies with a competitive advantage in the marketplace and are the result of twenty years of innovation. Id. at *1. Spec Simple’s technology is similar to Westlaw, LexisNexis, and Bloomberg Law, and allows users to search reference materials that are useful to design professionals. Id. at *1-2. In addition to its searching functionality, Spec Simple allows users to access a proprietary email system that allows users to email librarians who can run more complex searches and obtain price quotes, product specifications, and schedule meetings with vendors. Id. at *2.
Defendant FXFOWLE, an architectural firm, began subscribing to the Spec Simple databases in 2009. FXFOWLE also has an ownership interest in DPO, the other defendant in the action. Id. DPO is a competitor of Spec Simple. Id.
The Alleged Unauthorized Access
In its amended complaint, Spec Simple alleges that FXFOWLE provided DPO with its password to Spec Simple’s database. According to the amended complaint, DPO conducted thousands of searches over the course of the day and “downloaded for its own benefit large portions of Spec Simple’s Virtual Library and/or information or emails stored in Spec Simple’s Email System.” Id. at *3. Spec Simple further alleges that DPO used this information to lure away Spec Simple clients. Id. at *3.
Spec Simple asserted claims for violation of the CFAA. Importantly, Spec Simple did not allege any damages, including to its computer systems, other than competitive injury. FXFOWLE and DPO...
