“It’s a complete rubber stamp,” Judge Collins told counsel for the class. “He just took out the general formula, slapped it in the order, and we have no idea what he did with all that stuff that he developed over two days, he just didn’t tell us.”
“He made a great record, and the ruling is a cipher,” Judge Collins added.
California Pizza Kitchen, or CPK, notified those affected by the breach in November 2022, after determining a month earlier that Social Security numbers and other information may have been stolen, the company said in a disclosure to the Maine attorney general’s office. The company first discovered “suspicious activity” on its network on Sept. 15, prompting an investigation into the scope of the incident, it told Maine authorities.
Four lawsuits connected to the attack, which affected about 100,000 of CPK’s current and former employees, were consolidated and included allegations that CPK was negligent in allowing the breach to happen and broke an implied contract with current and former employees to adequately protect their personal data.