What kind of expense amounts to a “loss” under the Computer Fraud and Abuse Act (CFAA), and did a Virginia litigation-support company incur the required minimum of $5,000 in losses when it investigated an alleged breach of its computer systems, retaining the services of both an attorney and a computer forensics company to aid with the investigation? That was the issue recently before Judge T.S. Ellis III of the Eastern District of Virginia, who held that the investigative activities could support a CFAA claim, even if the expenses were not paid in cash.
The issue was particularly important to the plaintiff, Animators at Law, a graphics and technology litigation support company, because of the 13 claims it brought against two former employees and a competitor, all but the CFAA claim were based on state law, meaning that without it, there would be no basis for federal-court jurisdiction.
The CFAA provides for a civil action against anyone who intentionally gains access to a computer without authorization and obtains information from it. The CFAA has a minimum jurisdictional requirement of $5,000 in losses. Animators at Law claimed that its former employees conspired with a competitor to leave Animators’ employment and join the competitor, taking with them confidential and proprietary information about Animators’ services, projects, and clients.