1 2 3 4 UNITED STATES DISTRICT COURT 5 NORTHERN DISTRICT OF CALIFORNIA 6 7 WALKME LTD., AN ISRAELI Case No. 23-cv-03991-JSW COMPANY, et al., 8 ORDER GRANTING, IN PART, AND Plaintiffs, DENYING, IN PART, MOTION TO 9 DISMISS FIRST AMENDED v. COMPLAINT AND SCHEDULING 10 CASE MANAGEMENT CONFERENCE

WHATFIX, INC., A DELAWARE

11 CORPORATION, et al., Re: Dkt. No. 90 Defendants. 12 13 Now before the Court for consideration is the motion to dismiss filed by Whatfix, Inc. 14 (“WF Inc.”), which Whatfix PL (“WF PL”) (collectively “Whatfix” unless otherwise noted) has 15 joined. The Court has considered the parties’ papers, relevant legal authority, and the record in 16 this case, and it GRANTS, IN PART, and DENIES, IN PART, Whatfix’s motion. 17 BACKGROUND 18 The parties in this case are competitors in the digital adoption platform space. Plaintiffs, 19 WalkMe Ltd. (“WM Ltd.”) and WalkMe Inc. (“WM Inc.”) (collectively “WalkMe” unless 20 otherwise noted), allege they are “the creator of the world’s first digital adoption platform, a 21 software platform that works in tandem with other software applications, hosted services, and 22 websites, and enables [its] customers to more efficiently leverage [the customer’s] technology 23 investments by improving the end user experience and thus driving adoption and utilization of 24 those products.” (FAC ¶ 2; see also id. ¶¶ 20-22.) WalkMe alleges it is the market leader in this 25 space and that its success has spawned competition, including Whatfix. According to WalkMe, 26 Whatfix “is a lower-end imitator, whose business model is to provide cut-rate software that 27 emulates elements of WalkMe’s cutting-edge software, offering fewer features and lesser 1 WalkMe brings three categories of claims against Whatfix. The first category is for 2 alleged violations of the Defendant Trade Secrets Act (“DTSA”), 18 U.S.C. section 1836, and 3 California’s Uniform Trade Secrets Act (“CUTSA”), Civil Code sections 3426, et. seq. 4 (collectively the “trade secret claims”). The second category is for alleged violations of the 5 Computer Fraud and Abuse Act (“CFAA”), 18 U.S.C. section 1030(a)(2), and the California 6 Computer Data Access and Fraud Act (“CCDAFA”) (collectively, the “access claims”). The third 7 category is for false advertising under the Lanham Act, 15 U.S.C. section 1125, California’s 8 Unfair Competition Law, Business and Professions Code sections 17200, et seq., and California’s 9 False Advertising Law, Business and Professions Code sections 17500, et seq. 10 The Court will address additional facts as necessary in the analysis. 11 ANALYSIS 12 A. Applicable Legal Standards. 13 A court’s inquiry under Rule 12(b)(6) “is limited to the allegations in the complaint, which 14 are accepted as true and construed in the light most favorable to the plaintiff.” Lazy Y Ranch Ltd. 15 v. Behrens, 546 F.3d 580, 588 (9th Cir. 2008). Even under the liberal pleading standard of Rule 16 8(a)(2), “a plaintiff’s obligation to provide ‘grounds’ of his ‘entitle[ment] to relief’ requires more 17 than labels and conclusions, and formulaic recitation of the elements of a cause of action will not 18 do.” Bell Atl. Corp. v. Twombly, 550 U.S. 544, 555 (2007) (citing Papasan v. Allain, 478 U.S. 19 265, 286 (1986)). Pursuant to Twombly, a plaintiff cannot merely allege conduct that is 20 conceivable but must instead allege “enough facts to state a claim to relief that is plausible on its 21 face.” Id. at 570. “A claim has facial plausibility when the plaintiff pleads factual content that 22 allows the court to draw the reasonable inference that the defendant is liable for the misconduct 23 alleged.” Ashcroft v. Iqbal, 556 U.S. 662, 678 (2009) (citing Twombly, 550 U.S. at 556). 24 Where, as here, a plaintiff asserts a claim sounding in fraud, the plaintiff must “state with 25 particularity the circumstances regarding fraud or mistake.” Fed. R. Civ. P. 9(b). A claim sounds 26 in fraud if the plaintiff alleges “a unified course of fraudulent conduct and rel[ies] entirely on that 27 course of conduct as the basis of a claim.” Vess v. Ciba-Geigy Corp. USA, 317 F.3d 1097, 1103 1 the circumstances constituting fraud so that a defendant can prepare an adequate answer from the 2 allegations.” Moore v. Kayport Package Exp., Inc., 885 F.2d 531, 540 (9th Cir. 1989); see also 3 Vess, 317 F.3d at 1106. Accordingly, “[a]verments of fraud must be accompanied by ‘the who, 4 what, when, where, and how’ of the misconduct charged.” Vess, 317 F.3d at 1106 (quoting 5 Cooper v. Pickett, 137 F.3d 616, 627 (9th Cir. 1997)). 6 If the allegations are insufficient to state a claim, a court should grant leave to amend 7 unless amendment would be futile. See, e.g., Reddy v. Litton Indus. Inc., 912 F.3d 291, 296 (9th 8 Cir. 1990); Cook, Perkiss & Liehe, Inc. v. N. Cal. Collection Serv., Inc., 911 F.2d 242, 246-47 (9th 9 Cir. 1990). Where a plaintiff has previously amended and failed to correct deficiencies, the 10 Court’s “discretion to deny leave to amend is particularly broad[.]” Allen v. City of Beverly Hills, 11 911 F.2d 367, 373 (9th Cir. 1990) (quoting Ascon Props., Inc. v. Mobil Oil Co., 866 F.2d 1149, 12 1160 (9th Cir. 1989)). 13 B. The Court Dismisses the Claims Against WF Inc., in Part. 14 WF Inc. moves to dismiss all of WalkMe’s claims against it on the basis that the 15 allegations are directed at WF PL. WalkMe alleges that most of the individuals identified in the 16 FAC worked for WF PL but at least one of them worked for WF Inc. (See, e.g., FAC ¶¶ 32-33, 17 35, 37; Dkt. No. 23-5, Declaration of Amit Shrama, ¶ 11; FAC ¶¶ 35-36 (alleging Prigge and 18 others “gained unauthorized access” to WalkMe systems).) For that reason, there are allegations 19 that WF Inc. had some involvement in the actions forming the trade secret and computer access 20 claims. However, to the extent WalkMe seeks to hold WF Inc. vicariously liable for the acts of 21 WF PL, the allegations are too conclusory to state a claim. 22 Accordingly, the Court GRANTS, IN PART, AND DENIES, IN PART, WF Inc.’s motion 23 to dismiss on this basis. Because the Court cannot say it would be futile, the Court will grant 24 WalkMe one further opportunity to amend the claims against WF Inc. 25 C. The Court Dismisses the Trade Secret Claims. 26 In order to state a claim under DTSA or CUTSA, WalkMe must allege it possessed a trade 27 secret and that Whatfix misappropriated it. See InteliClear, LLC v. ETC Global Holdings, Inc., 1 similarity of elements); Sargent Fletcher, Inc. v. Able Corp., 110 Cal. App. 4th 1658, 1665 (2003). 2 Whatfix argues that WalkMe fails to sufficiently identify the trade secrets at issue. The 3 DTSA defines a trade secret as 4 all forms and types of financial, business, scientific, technical, economic, or engineering information, including patterns, plans, 5 compilations, program devices, formulas, designs, prototypes, methods, techniques, processes, procedures, programs, or codes, 6 whether tangible or intangible, and whether or how stored, compiled, or memorialized physically, electronically, graphically, 7 photographically, or in writing if-- (A) the owner thereof has taken reasonable measures to keep such information secret; and (B) the 8 information derives independent economic value, actual or potential, from not being generally known to, and not being readily 9 ascertainable through proper means by, another person who can obtain economic value from the disclosure or use of the 10 information[.] 11 18 U.S.C. § 1839(3). CUTSA’s definition of a trade secret is similar: “information, including a 12 formula, pattern, compilation, program, device, method, technique, or process, that: (1) Derives 13 independent economic value, actual or potential, from not being generally known to the public or 14 to other persons who can obtain economic value from its disclosure or use; and (2) Is the subject 15 of efforts that are reasonable under the circumstances to maintain its secrecy.” Cal. Civ. Code § 16 3426.1(d). 17 WalkMe is not required to disclose the details of its trade secrets in the FAC. However, it 18 must include facts that “describe the subject matter of the trade secret with sufficient particularity 19 to separate it from matters of general knowledge in the trade or of special knowledge of those 20 persons ... skilled in the trade.” InteliClear, 978 F.3d at 658; accord Diodes, Inc. v. Franzen, 260 21 Cal. App. 2d 244, 253 (1968). In general, “allegations that set out purported trade secrets in 22 broad, categorical terms that are merely descriptive of the types of information that generally may 23 qualify as protectible trade secrets are insufficient to state a claim.” Beluca Ventures LLC v. 24 Einride Aktiebolag, 660 F. Supp. 3d 898, 907 (N.D. Cal. 2023) (quoting Cisco Sys., Inc. v. Chung, 25 462 F. Supp. 3d 1024, 1048 (N.D. Cal. 2020) (emphasis in Cisco)). 26 Examples of such “broad, categorical” terms are: “source code, customer lists and 27 customer related information, pricing information … marketing plans and strategic business 1 based transceivers;” and “marketing strategy, product composition, packaging and manufacturing 2 logistics” are too general to state a claim. Cisco, 462 F. Supp. 3d at 1048 (quoting, respectively, 3 Vendavo, Inc. v. Price f(x) AG, No. 17-cv-6930-RS, 2018 WL 145697, at *3-4 (N.D. Cal. Mar. 23, 4 2018), Space Data Corp. v. X, No. 16-cv-3260-BLF, 2017 WL 5013363, at *2 (N.D. Cal. Feb. 16, 5 2017), and Five Star Gourmet Foods, Inc. v. Fresh Express, Inc., No. 19-cv-05611-PJH, 2020 WL 6 513287, at *7 (N.D. Cal. Jan. 31, 2020)); see also Ross v. Abbott Vascular, Inc., No. 19-cv-3794- 7 JST, 2022 WL 20275185, at *10 (N.D. Cal. Mar. 3, 2022) (finding allegations that trade secrets 8 consist of “tangible and intangible business, scientific, and technical information in the form of 9 training methods, techniques, processes, and written materials” insufficient to state a claim). 10 WalkMe alleges the trade secrets 11 include but are not limited to the details of (a) … the specific tools, capabilities, layout, workflow, and other details of WalkMe’s Rule 12 Engine and other editing tools that allow customers to create guidance for users even if the creator of the guidance has no 13 technical training, (b) WalkMe’s customer analytics and how those customer analytics are captured and presented, (c) the tools within 14 WalkMe’s digital adoption platform for customer analytics, including its Session Playback feature, and (d) how the above and 15 other capabilities of the WalkMe platform were used by, and configured for, particular customers. 16 17 (FAC ¶ 50; see also id. ¶¶ 25 (referring to no-code and editor tools), 26 (“WalkMe has unique 18 access to how its customers interact with its tools” and integrated “insight and learning … into 19 structure, functionality and other design elements”); 36 (alleging Whatfix users accessed 20 “underlying rule configurations”).) 21 In some instances general descriptions of subject matter may “become sufficiently 22 particularized” when a plaintiff alleges they “are contained within specific documents.” Beluca 23 Ventures, 660 F. Supp. 3d at 908. In Cisco, for example, the court determined that if the plaintiff 24 had “left unqualified” some of the descriptions of the alleged trade secrets, “market and strategy 25 data, … product strategies and other financial data, [and] … business information,” those 26 descriptions would be “insufficiently particularized.” 462 F. Supp. 3d at 1049. The plaintiff, 27 however, “narrowed the scope of information at issue in such categories to particular subjects 1 limiting the categories in that fashion, the court held the allegations were sufficiently detailed to 2 allege the existence of a trade secret. Id. 3 Similarly, in Beluca, the defendant asserted a counterclaim for misappropriation of trade 4 secrets and identified material in a report prepared by McKinsey as the purported trade secrets. 5 660 F. Supp. 3d at 904-05. Although the court determined that other allegations in the FAC were 6 insufficient, it determined the paragraphs discussing that report were “sufficiently particularized to 7 put [the plaintiff] on notice.” Id. at 909; see also Alta Devices, Inc. v. LG Elecs., Inc., 343 F. 8 Supp. 3d 868, 877 (N.D. Cal. 2018) (finding allegations sufficient where plaintiff specifically 9 referenced the technology – a “thin-film GaAs solar technology” – and specific trade secrets 10 relating to the technology, and where defendant signed a non-disclosure agreement that “described 11 with further particularity” the confidential information imparted). 12 In AlterG, Inc. v. Boost Treadmills, LLC, the plaintiff alleged the defendants, its former 13 employees, misappropriated trade secrets relating to an anti-gravity treadmills. 388 F. Supp. 3d 14 1133, 1139-41 (N.D. Cal. 2019). The plaintiff alleged the trade secrets consisted of “positive and 15 negative learnings of low cost mechanical unweighted systems[,] … mechanical unweighting 16 mainframes, … marketing and product strategy, cost strategies, customer needs, ... [and] 17 knowledge of vendors with appropriate, specialized skills.” Id. at 1145. The court concluded 18 those allegations were distinguishable from the specific allegations in Alta Devices. Instead, they 19 were the type of broad categorical descriptions that are not sufficient to plead a trade secret. Id. 20 Although the defendants signed non-disclosure agreements, as in Alta Devices, the facts alleged 21 did not demonstrate the agreements narrowed the scope of the categories at issue. 22 The Court finds that WalkMe’s allegations “more closely resemble” the broad categories 23 of information courts have found insufficient to plead a trade secret. AlterG, 388 F. Supp 3d at 24 1145. Although WalkMe does specifically refer to the “Rule Engine” and “Session Playback” in 25 the FAC, Whatfix submitted portions of WalkMe’s website that includes information about those 26 features. In response, WalkMe argues the information available to the public does not include 27 “proprietary tools, capabilities, layout, or workflow of the Rule Engine” and does not show 1 not alleged in the FAC and the existing allegations about those features are not sufficient to 2 separate matters of general knowledge in the trade or of special knowledge of those persons ... 3 skilled in the trade” from non-public information. InteliClear, 978 F.3d at 658. 4 WalkMe also argues that “the information accessed by Whatfix went beyond the user- 5 facing content that a regular customer end user could view; it instead included content creation 6 tools and information about those tools that only certain customer employees with administrator 7 access privileges could see.” (Opp. Br. at 7:12-14.) Again, those facts are not alleged in the FAC. 8 Finally, to the extent WalkMe relies on confidentiality provisions with its customers, it has not 9 alleged facts to show that the definitions contained in those agreements are sufficiently specific to 10 put Whatfix employees on notice of material that would constitute a trade secret. 11 Accordingly, the Court GRANTS Whatfix’s motion to dismiss the trade secret claims. The 12 Court will grant WalkMe one further opportunity to amend these claims. If WalkMe chooses to 13 amend and continues to rely on the theory that its former employees or former employees of 14 WalkMe customers misappropriated trade secrets, it must include additional facts to support that 15 theory. The facts in the FAC are insufficient to allege misappropriation based on that theory. The 16 Court concludes that WalkMe’s allegations are sufficient to plead that at least one of Whatfix’s 17 employees, Dipit Sharma, engaged in conduct that could qualify as misappropriation if WalkMe 18 can sufficiently identify the trade secrets at issue. (See FAC ¶¶ 37-38 (citing Declaration of Dipit 19 Sharma (“Sharma Decl.”) ¶ 3), Sharma Decl., ¶¶ 4-5.)1 20 D. The Court Dismisses the Access Claims, in Part. 21 1. The CFAA Claim. 22 “The CFFA was enacted to prevent intentional intrusion onto someone else’s computer— 23 specifically, computer hacking” and “is best understood as an anti-intrusion statute and not as a 24 misappropriation statute[.]” HiQ Labs, Inc. v. LinkedIn Corp., 31 F.4th 1180, 1196 (9th Cir. 25 2022) (internal quotations and citations omitted). It prohibits, inter alia, intentionally accessing a 26 1 The unredacted version of the Sharma Declaration is found at Docket No. 23-8. Because 27 WalkMe cites to the declaration in the FAC, the Court has considered Mr. Sharma’s statements 1 computer “without authorization” or by “exceed[ing] authorized access” to obtain information 2 from a protected computer. 18 U.S.C. § 1030(a)(2)(C). The phrase “without authorization” 3 means without permission. See HiQ Labs, 31 F.4th at 1195. The phrase “exceeds authorized 4 access” means accessing “a computer with authorization and [using] such access to obtain or alter 5 information in the computer that the accesser is not entitled so to obtain or alter.” 18 U.S.C. § 6 1030(e)(6). “[L]iability under both clauses stems from a gates-up-or-down inquiry - one either 7 can or cannot access a computer system, and one either can or cannot access certain areas within 8 the system.” VanBuren v. United States, 593 U.S. 374, 141 S.Ct. 1648, 1658-59 (2021). It “does 9 not cover those who …. have improper motives for obtaining information that is otherwise 10 available to them.” Id. at 1652. WalkMe alleges that Whatfix violated Section 1030(a)(2)(C) in 11 two ways. 12 First, it alleges Whatfix used customer credentials to access the WalkMe platform, which 13 WalkMe alleges was “expressly prohibited under the terms of WalkMe’s agreements with its 14 customers.” (FAC ¶ 43.) WalkMe alleges in a conclusory fashion that these account credentials 15 were “fake” but does not explain why that is so. The FAC also does not contain facts from which 16 the Court could reasonably infer that Whatfix employees tricked WalkMe customers into 17 providing them with credentials. Thus, this is not a case where Whatfix employees used 18 “phishing” emails to get information from WalkMe’s customers, which distinguishes it from 19 Microsoft Corp. v. Does 1-2, No. 21-cv-822, RDA/IDD, 2022 WL 18359421, at *4 (E.D. Va. 20 Dec. 27, 2022), report and recommendation adopted, 2023 WL 289701 (E.D. Va. Jan. 18, 2023). 21 WalkMe does allege that Whatfix’s use of the credentials was not allowed under the customers’ 22 contracts or authorized in any way. (Id. ¶ 33.) The phrase “‘exceeds authorized access’ in the 23 CFAA does not extend to violations of use restrictions.” See, e.g., United States v. Nosal, 676 24 F.3d 854, 864 (9th Cir. 2012). 25 Second, WalkMe alleges that Whatfix exceeded any access that was authorized for the 26 purpose of migrating data. (Id. ¶¶ 6-8, 34, 36-40, 43, 97.) As noted above, however, there are no 27 facts to show Whatfix employees accessed areas of the WalkMe platform that customers were not 1 With one exception, WalkMe’s allegations are not sufficient to allege the type of breaking 2 and entering prohibited by the CFAA. The exception is the allegations regarding Dipit Sharma’s 3 conduct discussed in Section C of this Order. Because the allegations show that he used customer 4 credentials after Whatfix’s work with that customer had ended, the Court concludes WalkMe 5 sufficiently alleges he accessed WalkMe’s platform without authorization or by exceeding 6 authorization he was granted previously. 7 Accordingly, the Court GRANTS, IN PART, AND DENIES, IN PART, Whatfix’s motion 8 to dismiss the CFAA Claim. Because the Court cannot say it would be futile, it will grant 9 WalkMe one further opportunity to amend this claim. 10 2. The Section 502 Claim. 11 Section 502 makes it unlawful to “[k]nowingly access[] and without permission” take, 12 copy, or make use of “any data from a computer, computer system, or computer network, or… any 13 supporting documentation, whether existing or residing internal or external to a computer, 14 computer system, or computer network.” Cal. Pen. Code § 502(c)(2). Although Section 502 is a 15 state law analogue of the CFAA, the provision of Section 502 at issue “does not require 16 unauthorized access. It merely requires knowing access.” United States v. Christensen, 828 F.3d 17 763, 788 (9th Cir. 2015); see also Bui-Ford v. Tesla, Inc., No. 23-cv-2321-JST, 2024 WL 694485, 18 at 5 (N.D. Cal. Feb. 20, 2024) (relying on Christensen to distinguish subsections of Section 502 19 where access must be knowing and unauthorized from subsections (c)(2) and (c)(4) which require 20 only that access be knowing). 21 Under subsection (c)(2), access becomes unlawful when an individual or entity “‘without 22 permission takes, copies, or makes use of’ data on the computer.” Christensen, 828 F.3d at 788 23 (quoting Cal. Penal Code § 502(c)(2).) In Christensen, the court held “logging into a database 24 with a valid password and subsequently taking, copying, or using the information in the database 25 improperly” would violate the statute. Id. at 789. As currently drafted, that is what WalkMe 26 alleges here, and the Court concludes that those allegations are sufficient to state a claim. 27 Whatfix also argues that WalkMe’s Section 502 claim fails because the statute cannot be 1 located and it does not identify where the WhatFix employees are located. It does generally allege 2 that Whatfix directed its activities at WalkMe’s California business and identified Paula Prigge as 3 a WF Inc. employee based in the United States. At this stage, the Court cannot conclude as a 4 matter of law that all of the conduct at issue took place outside of California. 5 Accordingly, the Court DENIES the motion to dismiss the Section 502 Claim. 6 E. The Court Denies the Motion to Dismiss the False Advertising Claims.2 7 The essential elements of a claim for false advertising under the Lanham Act are: 8 (1) a false statement of fact by the defendant in a commercial advertisement about its own or another’s product; (2) the statement 9 actually deceived or has the tendency to deceive a substantial segment of its audience; (3) the deception is material, in that it is 10 likely to influence the purchasing decision; (4) the defendant caused its false statement to enter interstate commerce; and (5) the plaintiff 11 has been or is likely to be injured as a result of the false statement, either by direct diversion of sales from itself to defendant or by a 12 lessening of the goodwill associated with its products. 13 Southland Sod Farms v. Stover Seed Co., 108 F.3d 1134, 1139 (9th Cir. 1997); Lexmark Int’l, Inc. 14 v. Static Control Components, Inc., 572 U.S. 118, 140 (2014) (to “invoke the Lanham Act’s cause 15 of action for false advertising, a plaintiff must plead (and ultimately prove) an injury to a 16 commercial interest in sales or business reputation proximately caused by the defendant’s 17 misrepresentations”). Similarly, to state a claim under California’s FAL, WalkMe must allege that 18 “members of the public are likely to be deceived” by a false or misleading statement. Bank of the 19 West v. Sup. Ct., 2 Cal. 4th 1254, 1267 (1994). 20 The Court concludes that WalkMe’s allegations about Whatfix’s false statements satisfy 21 Rule 9(b) and are sufficient to allege what the challenged statements are and why they are literally 22 false. The Court also concludes that the allegations regarding comparison tables are sufficient to 23 allege the statements would be likely to deceive and would be material to a consumer. See, e.g., 24 Southland So., 108 F.3d at 1146 (“publication of deliberately false comparative claims gives rise 25 to a presumption of actual deception and reliance”) (brackets omitted, quoting U–Haul Int’l, Inc. 26

27 2 WalkMe’s UCL claim is based on Whatfix’s alleged violation of the Lanham Act and will ] v. Jartran, Inc., 793 F.2d 1034, 1040-41 (9th Cir. 1986)). 2 Accordingly, the Court DENIES Whatfix’s motion to dismiss the false advertising claims 3 and the UCL claim. 4 CONCLUSION 5 For the foregoing reasons, the Court GRANTS, IN PART, and DENIES, IN PART, 6 || Whatfix’s motion to dismiss. If WalkMe chooses to amend, it shall file an amended complaint by 7 || no later than April 5, 2024 and Whatfix shall answer or otherwise respond by April 19, 2024. If 8 WalkMe chooses not to amend, it shall file a notice to that affect by no later than April 5, 2024, 9 || and Whatfix’s answer will be due by April 19, 2024. 10 The parties shall appear for an initial case management conference on May 10, 2024, and 11 their joint case management conference statement shall be due by May 3, 2024. 3s 12 IT ISSO ORDERED. a) fo } «13 Dated: March 21, 2024 / / j 2 JEFEREY Sf WHITE } 15 United St ps DistricpJudge 16 j/ ”

«17

Oo

Z 18

19 20 21 22 23 24 25 26 27 28