Facebook, Inc. v. Amalgamated Bank

In this securities fraud class action, lead plaintiff Amalgamated Bank sued Facebook, Inc. (now Meta Platforms, Inc.) for making materially misleading statements about its data privacy practices. The case stemmed from the 2018 Cambridge Analytica scandal, where the personal data of millions of users was improperly harvested. The plaintiffs alleged that Facebook violated the Securities Exchange Act by failing to disclose the full extent of the data breach's risk, artificially inflating the company's stock price, which subsequently dropped after the scandal became public. The Supreme Court was asked to review the risk-disclosure requirements under the securities laws.

On November 22, 2024, the Supreme Court dismissed the writ of certiorari as improvidently granted, leaving the lower court's ruling in place. The Ninth Circuit had previously allowed the shareholder class action to proceed, finding that Facebook's risk disclosures were indeed misleading because they presented the Cambridge Analytica data breach as a mere hypothetical risk when the company knew the risk had already materialized.

The core dispute was whether Facebook's risk disclosures in its SEC filings were materially misleading. Specifically, the Court examined if a company can be held liable for securities fraud for framing a past data breach as a hypothetical future risk, rather than disclosing it as an event that had already occurred, thereby deceiving investors about the true state of the company.

The Supreme Court's decision has significant implications for corporate disclosure practices, particularly in the tech industry. It affirms that companies cannot shield themselves from securities fraud liability by characterizing past adverse events as speculative future risks. This ruling strengthens investor protection and pressures companies to be more transparent and timely in disclosing material data breaches and cybersecurity incidents, potentially reshaping how risk factors are drafted in regulatory filings.