{"id":2365,"date":"2025-08-26T08:39:13","date_gmt":"2025-08-26T12:39:13","guid":{"rendered":"https:\/\/blogs.duanemorris.com\/classactiondefense\/?p=2365"},"modified":"2025-08-26T08:39:13","modified_gmt":"2025-08-26T12:39:13","slug":"illinois-federal-court-dismisses-data-breach-class-action-lawsuit-for-lack-of-subject-matter-jurisdiction","status":"publish","type":"post","link":"https:\/\/blogs.duanemorris.com\/classactiondefense\/2025\/08\/26\/illinois-federal-court-dismisses-data-breach-class-action-lawsuit-for-lack-of-subject-matter-jurisdiction\/","title":{"rendered":"Illinois Federal Court Dismisses Data Breach Class Action Lawsuit For Lack Of Subject-Matter Jurisdiction"},"content":{"rendered":"<div class=\"wp-block-image\">\n<figure class=\"alignleft size-full is-resized\"><a href=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2025\/08\/data.png\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2025\/08\/data.png\" alt=\"\" class=\"wp-image-2366\" style=\"width:272px;height:auto\" srcset=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2025\/08\/data.png 768w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2025\/08\/data-300x200.png 300w\" sizes=\"auto, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p><strong>By Gerald L. Maatman, Jr., Christian Palacios, and Brett Bohan<\/strong><\/p>\n\n\n\n<p><strong><em>Duane Morris Takeaways<\/em>:<\/strong> <em>On August 20, 2025, in Phelps v. Ill. Bone &amp; Joint Inst., LLC, No. 24-CV-08555, 2025 WL 2410341 (N.D Ill. Aug. 20, 2025), Judge Martha Pacold of the U.S. District Court for the Northern District of Illinois <a href=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2025\/08\/Phelps-v-IBJI-Decision.pdf\">granted<\/a> Defendant Illinois Bone &amp; Joint Institute, LLC\u2019s motion to dismiss for lack of subject matter jurisdiction. The Court held Plaintiff failed to adequately plead Defendant\u2019s citizenship, given its status as a limited liability company; therefore, the Court could not determine whether complete diversity existed between the parties. This ruling illustrates the differences between the general diversity statute under 28 U.S.C. \u00a7 1332(a), and the more lenient \u201cminimal diversity\u201d requirement under the Class Action Fairness Act, as well as the consequences of failing to sufficiently plead a limited liability company\u2019s citizenship.\u00a0<\/em><\/p>\n\n\n\n<p><strong>Case Background<\/strong><\/p>\n\n\n\n<p>On August 30, 2024, Defendant Illinois Bone &amp; Joint Institute, LLC (\u201cDefendant\u201d) sent a data breach notification letter to its patients, including Plaintiff Alexandra Phelps (\u201cPlaintiff\u201d). <em>Id<\/em>. at *1. Plaintiff, individually and on behalf of a putative class, filed a lawsuit shortly after receiving the letter alleging negligence, negligence per se, breach of implied contract, and violation of the Illinois Personal Information Protection Act. <em>Id<\/em>. &nbsp;<\/p>\n\n\n\n<p>Defendant moved to dismiss the complaint pursuant to Rule 12(b)(1) of the Federal Rules of Civil Procedure for lack of subject matter jurisdiction. <em>Id.<\/em> In the motion, Defendant raised two arguments, including: (i) that Plaintiff lacked Article III standing, and (ii) that Plaintiff could not establish diversity jurisdiction under the Class Action Fairness Act (\u201cCAFA\u201d). <em>Id.<\/em> Although Plaintiff had invoked jurisdiction under the CAFA in her Complaint, she did not respond to Defendant\u2019s CAFA arguments. <em>Id.<\/em> at 2. Instead, Plaintiff argued that she could \u201cinvoke jurisdiction under the general diversity statute, 28 U.S.C. \u00a7 1332(a).\u201d <em>Id.<\/em><\/p>\n\n\n\n<p><strong>The Court\u2019s Order<\/strong><\/p>\n\n\n\n<p>The Court determined that the Complaint failed to allege sufficient facts to support diversity jurisdiction.<\/p>\n\n\n\n<p>First, the Court reasoned that Plaintiff\u2019s decision not to respond to Defendant\u2019s CAFA arguments amounted to a concession that Plaintiff could not meet the standards for subject-matter jurisdiction under the statute. <em>Id.<\/em> However, although Plaintiff had not invoked general diversity jurisdiction in her Complaint, the Court permitted her to raise these arguments because \u201ca complaint\u2019s imperfect statement of the legal theory supporting jurisdiction does not itself defeat jurisdiction.\u201d <em>Id.<\/em><\/p>\n\n\n\n<p>Second, the Court observed that, to satisfy general diversity jurisdiction, Plaintiff must be able to show that Plaintiff is a citizen of a different state than Defendant and \u201cthe amount in controversy exceeds $75,000, exclusive of interest and costs.\u201d <em>Id<\/em>. Under the CAFA, an LLC, like Defendant, is \u201ca citizen of the State where it has its principal place of business and the State under whose laws it is organized.\u201d <em>Id.<\/em> Under the general diversity statute, on the other hand, an LLC is a citizen \u201cof every state of which any member is a citizen.\u201d <em>Id.<\/em> The Court concluded that the Complaint did not include any allegations of Defendant\u2019s \u201cmember\u2019s identity or citizenship.\u201d <em>Id<\/em>. As such, the Court could not determine whether \u201cany member is a citizen of the same state as Phelps.\u201d <em>Id.<\/em> Because the Complaint did not allege facts sufficient for the Court to conclude that \u201ccomplete diversity between the parties\u201d existed, the Court dismissed the case without prejudice. <em>Id.<\/em><\/p>\n\n\n\n<p>In sum, the Court concluded that, to establish diversity jurisdiction, a Complaint must adequately allege the citizenship of all parties. <em>Id.<\/em> &nbsp;Plaintiff\u2019s failure to plead the citizenship of all Defendant\u2019s members was, therefore, fatal to her claims. <em>Id<\/em>. at 3<\/p>\n\n\n\n<p><strong>Implications For Employers<\/strong><\/p>\n\n\n\n<p>The Court\u2019s ruling in <em>Phelps<\/em> serves as a reminder of the distinctions between the the CAFA\u2019s minimal diversity jurisdiction requirement and general diversity jurisdiction. While Plaintiff\u2019s Complaint may have included sufficient facts to establish Defendant\u2019s citizenship under the CAFA, the Complaint could not support the more demanding \u201ccomplete\u201d diversity jurisdiction requirement under 28 U.S.C. \u00a7 1332(a).&nbsp;<\/p>\n\n\n\n<p>This case highlights an important procedural defense available to employers, particularly if the named corporate entity in the litigation is a limited liability company (rather than a traditional corporation, who\u2019s citizenship is tied to its state of incorporation and principal place of business). Employers should take note of a plaintiff\u2019s burden to sufficiently establish federal subject matter jurisdiction at the outset of the litigation, and the accompanying procedural defenses they might avail themselves of when a plaintiff fails to sufficiently plead the jurisdictional prerequisite.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Gerald L. Maatman, Jr., Christian Palacios, and Brett Bohan Duane Morris Takeaways: On August 20, 2025, in Phelps v. Ill. Bone &amp; Joint Inst., LLC, No. 24-CV-08555, 2025 WL 2410341 (N.D Ill. Aug. 20, 2025), Judge Martha Pacold of the U.S. District Court for the Northern District of Illinois granted Defendant Illinois Bone &amp; &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/2025\/08\/26\/illinois-federal-court-dismisses-data-breach-class-action-lawsuit-for-lack-of-subject-matter-jurisdiction\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Illinois Federal Court Dismisses Data Breach Class Action Lawsuit For Lack Of Subject-Matter Jurisdiction&#8221;<\/span><\/a><\/p>\n","protected":false},"author":575,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91],"tags":[],"ppma_author":[7,105,140],"class_list":["post-2365","post","type-post","status-publish","format-standard","hentry","category-data-breach-class-actions"],"authors":[{"term_id":7,"user_id":575,"is_guest":0,"slug":"gmaatman","display_name":"Gerald L. Maatman, Jr.","avatar_url":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2022\/09\/maatmangerald-100x100.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""},{"term_id":105,"user_id":677,"is_guest":0,"slug":"cpalacios","display_name":"Christian Palacios","avatar_url":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2023\/12\/PalaciosChristian-100x100.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""},{"term_id":140,"user_id":719,"is_guest":0,"slug":"bbohan","display_name":"Brett Bohan","avatar_url":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2025\/04\/bohanbrett-100x100.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/posts\/2365","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/users\/575"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/comments?post=2365"}],"version-history":[{"count":0,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/posts\/2365\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/media?parent=2365"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/categories?post=2365"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/tags?post=2365"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/ppma_author?post=2365"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}