A B.C. Supreme Court judge has ruled that ICBC is liable for some of the damages stemming from an employee selling information of individuals who were then targeted in a series of shootings and arsons.
The court said Candy Elaine Rheaume improperly accessed drivers’ information and that the attacks could not have taken place without that.
“I find that ICBC is vicariously liable for Ms. Rheaume’s conduct and for any damages that may be awarded,” Justice Nathan Smith said in his decision Wednesday. “I find the use of the information for some illegal purpose was among the entirely foreseeable consequences of distributing the information to someone outside ICBC. It was also foreseeable that people being identified would be the targets of any illegal purpose.”
As a result of a 2011 police investigation, ICBC discovered an employee wrongfully accessed the files of at least 79 of its customers.
Between April 2011 and January 2012, houses and vehicles belonging to 13 people were targeted in arson and shooting attacks. All of the victims had parked their vehicles at or near the Justice Institute of B.C. in New Westminster.
The customers’ personal information had been sold to an associate of the United Nations Gang, who was responsible for arranging the attacks, the decision said.
In 2017, Rheaume, a New Westminster resident, pleaded guilty in provincial court to unauthorized use of a computer.
She received a suspended sentence of nine months’ probation with an order to do 40 hours of community service. But that wasn’t the end of the case, as victims sought compensation for the fallout from Rheaume’s actions.
B.C.’s Court of Appeal ruled in May 2019 that a privacy class-action suit against ICBC by those targeted could proceed.
Representative plaintiff Ufuk Ari alleged he was told by ICBC in 2012 that on June 17, 2010, an ICBC employee viewed Ari’s personal information “without an apparent business purpose.”
Rheaume received $25 per name from an acquaintance involved in the drug trade in return for information including names, addresses, driver’s licence numbers, vehicle descriptions and identification numbers, licence plate numbers and claims histories.
The information was used to target 13 people whose information had been handed over, the appeal court said.
Lawyer Guy Collette, who represented Ari in the class-action suit, called the judge’s ruling a significant victory for all those who had their personal information wrongfully accessed. “ICBC not only has to compensate all of the individuals whose files were unlawfully accessed and everyone residing with them at the time of the breaches, but additional compensation is awarded for property damage, and physical and psychological injury sustained due to the privacy breaches.”
ICBC admitted Rheaume, a claims adjuster, used its databases to access personal information of some of its customers without authorization and in a way that exceeded the purpose of the database access she was given as part of her job.
The court said ICBC admitted Rheaume sold some information she obtained to Aldorino Moretti and some of that information was used by Vincent Eric Gia-Hwa Cheung, Thurman Ronley Taffe and others to carry out the attacks.
In 2016, Cheung was sentenced to 13 1/2 years in prison for the attacks.
“There was a direct connection between the information supplied by Ms. Rheaume and the attacks carried out by Mr. Cheung. He could not have carried out the attacks without it,” Smith said, adding ICBC is vicariously liable for general damages and pecuniary damages caused by Rheaume’s actions.
“The attacks were not unforeseeable intervening acts, and liability extends to the property damage that the subclass members suffered as a result of the attacks,” the judge said.
Smith directed lawyers to schedule case management meetings for assessment of class-wide damages and appropriate procedures for determination of individual issues.
ICBC could not be immediately reached for comment.
