Executive Summary: Key Legal and Evidentiary Issues

• Plaintiff opted out of a class action and pursued an individual claim related to a major data breach.

• Claimed emotional distress from potential misuse of leaked personal data without concrete evidence.

• Defendant contested both the existence of fault and the causal connection to alleged damages.

• No documentation was submitted by the plaintiff to support her claims of stress or harm.

• The court applied article 1611 of the Civil Code of Québec to assess compensable damages.

• Judgment emphasized that speculative future harm does not constitute a legally compensable injury.

Background and context

In 2019, the Fédération des Caisses Desjardins du Québec suffered a massive security breach involving the theft of personal information belonging to its members and clients. This widely publicized incident led to a class action, which was available to affected individuals. France Abalain, a member of Desjardins, voluntarily excluded herself from the class action and instead chose to file an individual lawsuit before the Small Claims Division of the Court of Québec.

Plaintiff’s position

Abalain alleged that the disclosure of her personal data resulted in overwhelming emotional distress. She claimed the incident forced her to live with constant anxiety, fearing misuse of her information at any time in the future. She demanded $15,000 in damages from Desjardins, asserting that this ongoing stress constituted a compensable injury.

Defendant’s arguments

Desjardins denied all allegations of wrongdoing, stating it had taken reasonable and diligent steps to safeguard member data. The institution also disputed the existence of any fault and argued there was no causal link between its actions and Abalain’s alleged distress. Additionally, it questioned the legitimacy and extent of the damages claimed.

Court’s analysis

The court noted that Abalain failed to present any evidence demonstrating Desjardins committed a fault. There was also no documentation or expert testimony supporting her claim of “enormous stress.” Relying on article 1611 of the Civil Code of Québec, the court reiterated that damages must reflect real, proven loss or deprivation of gain. Emotional suffering without objective proof does not meet this threshold, particularly when based on hypothetical or future risks.

The court referred to prior case law, including Li c. Equifax inc. and Sofio c. OCRCVM, which reinforced the principle that potential future harm—such as the risk of fraud or illness—cannot form the basis for compensation in Québec civil law.

Decision and outcome

The court dismissed Abalain’s claim entirely, concluding that she had not met the burden of proof required for civil liability. Despite this, the judge chose not to impose legal costs on either party, exercising discretion in consideration of the circumstances. The judgment reaffirms strict evidentiary standards in claims for non-pecuniary damages linked to data breaches.