Tenth Circuit Clarifies CFAA “Loss” and Trade-Secret Remedies: Investigative Costs Need Not Be “Technological Harm,” and DTSA/UTSA Causation Is Remedy-Specific

Introduction

In Moxie Pest Control (Utah) v. Nielsen (10th Cir. Jan. 21, 2026) (published), a group of related pest-control entities operating under the “Moxie” brand sued competitor Aptive Environmental, LLC and several employees after Aptive allegedly bribed individuals to obtain Moxie’s confidential sales “leaderboards” from a password-protected system (SalesRoutes). Moxie claimed the data became a recruitment weapon in the competition for summer door-to-door sales representatives.

Moxie asserted claims under the Computer Fraud and Abuse Act (CFAA), RICO, the Defend Trade Secrets Act (DTSA), and the Utah Uniform Trade Secrets Act (UTSA). The district court (i) dismissed the CFAA claim on the ground that Moxie failed to plead the CFAA’s “loss” requirement post-Van Buren, (ii) denied broad motions to compel damages discovery, and (iii) granted summary judgment for Aptive on RICO/DTSA/UTSA primarily for lack of causation evidence linking the misappropriation to Aptive’s profits.

The Tenth Circuit reversed the CFAA dismissal, affirmed the discovery ruling, affirmed summary judgment on RICO, but reversed in part on DTSA/UTSA because the district court failed to analyze non–unjust-enrichment remedies (reasonable royalties and injunctive relief).

Summary of the Opinion

  • CFAA: Reversed dismissal. The CFAA does not require a plaintiff to plead “technological harm” to satisfy statutory “loss.” Allegations of $5,000+ in investigative costs aimed at identifying the offender, the method, and the scope of access plausibly plead loss under 18 U.S.C. § 1030(e)(11).
  • Discovery: Affirmed. Denial of motions to compel was not an abuse of discretion because Moxie’s requests were broad; the district court ordered narrower disclosures and left open the possibility of further discovery.
  • RICO: Affirmed summary judgment. Moxie lacked evidence connecting misappropriation to Aptive’s gains; temporal correlation and generalized recruitment theories were insufficient.
  • DTSA/UTSA: Affirmed in part and reversed in part. Lack of causation defeats unjust-enrichment damages, but does not necessarily defeat claims where reasonable royalties and injunctive relief remain in play. Remanded for the district court to consider these remedies.

Analysis

Precedents Cited

1) Pleading and summary-judgment review standards

  • KT & G Corp. v. Att'y Gen. of Okla. and Birch v. Polaris Indus., Inc. supplied the framing standards: at dismissal, accept well-pleaded facts as true; at summary judgment, draw inferences for the nonmovant.
  • Yousuf v. Cohlmia was cited within Birch v. Polaris Indus., Inc. for Rule 56 inference principles.

2) CFAA “loss” after Van Buren

  • Van Buren v. United States was the pivotal reference point. The district court treated its discussion of “loss” as narrowing civil CFAA recovery to “technological harms.” The Tenth Circuit rejected that reading, characterizing the relevant language as dicta used to illuminate the scope of “without authorization”/“exceeds authorized access,” not to restrict recoverable civil loss once a violation is adequately alleged.
  • The court noted lower-court reliance on Van Buren in cases like hiQ Labs, Inc. v. LinkedIn Corp. and X Corp. v. Ctr. for Countering Digit. Hate, Inc., but charted a different course by anchoring its analysis in the CFAA’s text: “any reasonable cost,” including “responding to an offense” and “conducting a damage assessment.”
  • The court invoked Royal Truck & Trailer Sales & Serv., Inc. v. Kraft (quoted in Van Buren) for the idea that the CFAA addresses typical hacking consequences, yet emphasized that investigative response costs can be part of that response even absent data corruption.
  • To support investigative costs as “loss,” the court aligned with:
    • A.V. ex rel. Vanderhye v. iParadigms, LLC
    • Brown Jordan Int'l, Inc. v. Carmicle
    • Yoder & Frey Auctioneers, Inc. v. EquipmentFacts, LLC
    These cases recognize loss as including reasonable response, forensic, and assessment costs incurred after unauthorized access.
  • Post-Van Buren authorities were also cited to show continued acceptance of this approach, including Vox Mktg. Grp. v. Prodigy Promos and Ryanair DAC v. Booking Holdings, Inc.. The court also referenced United States v. Nosal (via Ryanair DAC v. Booking Holdings, Inc.) to illustrate the distinction between qualifying investigative costs (identity/method/scope) and non-qualifying “business harm” investigations.

3) Discovery discretion and prejudice

  • Norton v. City of Marietta governed abuse-of-discretion review of motions to compel.
  • United States v. Wright supported the point that reversal is disfavored absent prejudice—here, the district court did not foreclose future targeted discovery.

4) Causation and speculation at summary judgment

  • The court relied on GeoMetWatch Corp. v. Behunin (quoting Heslop v. Bear River Mut. Ins. Co.) for the proposition that plaintiffs cannot rely on theorizing where evidence of causation is lacking.
  • GeoMetWatch Corp. v. Behunin (quoting Hasan v. AIG Prop. Cas. Co.) reinforced that “mere speculation” cannot create a genuine issue of material fact.

5) Trade-secret remedies: reasonable royalties and injunctions

  • Storagecraft Tech. Corp. v. Kirby was central to the reasonable-royalty discussion, explaining royalties as a hypothetical “willing buyer/willing seller” license-price construct. The citation supported the court’s conclusion that reasonable royalties can remain viable even when proof of realized profits or actual loss is thin.
  • The court declined to decide injunctive-relief issues not passed upon below, citing Lowe v. Town of Fairland.
  • Remand restraint was reinforced by United States v. Suggs (quoting Cutter v. Wilkinson) that appellate courts are courts of review, not first view.

Legal Reasoning

1) CFAA: “Loss” is textually broader than “technological harm”

The court’s core interpretive move was textual. The CFAA defines “loss” to include “any reasonable cost to any victim,” expressly including “responding to an offense” and “conducting a damage assessment.” The panel reasoned that reading Van Buren as imposing a categorical “technological harm” requirement would contradict this statutory language and the CFAA’s structure: only some CFAA violations require actual “damage” to a computer, yet the civil cause of action is triggered by “loss” (and other enumerated factors), not necessarily damage.

The court also drew a limiting principle: investigative expenses qualify when they are reasonably necessary to respond to the offense (identify perpetrator, method, and scope of access), but not when they are aimed at downstream business harm (such as investigating how a competitor used the information). At the pleading stage, Moxie’s allegations fit within the qualifying category.

2) Discovery: proportionality and staged damages proof

Without invoking a rigid rule, the panel treated the district court’s approach as a classic narrowing exercise: deny overbroad requests, compel targeted initial disclosures, and permit later supplementation. Because Moxie did not pursue further court-ordered discovery after the narrowed disclosures, it could not attribute the resulting evidentiary gap to the court.

3) RICO: correlation is not causation

On RICO, the panel accepted (for purposes of review) evidence that Aptive sought Moxie data, used it in recruiting, and grew during the period. But it emphasized the missing link: evidence that any particular recruits joined Aptive because of the stolen data and then produced profits traceable to the scheme. The “paradigmatic” example (Zak Benson) produced no sales. The court thus held Moxie’s theory remained speculative, warranting summary judgment.

4) DTSA/UTSA: causation is remedy-specific, not claim-extinguishing

The panel’s most consequential trade-secret holding is remedial: DTSA/UTSA provide multiple remedies, and the role of causation differs among them. “Actual loss” and “unjust enrichment” require proof of harm “caused by” misappropriation. But injunctive relief is forward-looking and does not depend on past realized damages; and reasonable royalties are expressly available “in lieu of” other measures, functioning as a proxy where traditional causation-and-amount proof may be hard. Therefore, the district court erred by treating the lack of causation evidence as fatal to the DTSA/UTSA claims without analyzing whether royalties or an injunction remained viable.

Impact

1) CFAA claims in the Tenth Circuit: investigative response costs remain actionable

The decision is a meaningful clarification for civil CFAA litigation after Van Buren. Plaintiffs who can plead unauthorized access may satisfy the $5,000 “loss” threshold through reasonable, offense-directed investigative costs even absent data corruption or service interruption. This lowers the dismissal-stage vulnerability of CFAA claims where the principal harm is secrecy breach and incident response.

2) A practical boundary: “responding to the offense” vs. “business harm” inquiries

The court’s distinction between qualifying and non-qualifying investigative costs is likely to drive future pleading and proof: complaints should describe investigative work in terms of identifying the attacker, access vector, and scope—rather than market impact analysis.

3) Trade-secret litigation: remedy-by-remedy adjudication

The remand on DTSA/UTSA signals that district courts should not short-circuit trade-secret claims solely because plaintiffs cannot show defendant’s profits or plaintiff’s lost sales. Where misappropriation is proven or genuinely disputed, reasonable royalties and injunctions may sustain the case even when unjust enrichment cannot be shown.

4) Evidence strategy: recruitment causation must be granular

On causation (especially for RICO and unjust enrichment), the opinion underscores the need for recruit-level or transaction-level proof—e.g., testimony from recruits, recruiter scripts tied to decisions, measurable conversion effects, or econometric attribution—rather than generalized “it must have helped” narratives.

Complex Concepts Simplified

  • CFAA “loss”: Not the same as “damage.” “Damage” typically means impairment to data or systems; “loss” can include reasonable incident-response costs (like investigating how someone got in and what they accessed), so long as those costs are tied to responding to the offense.
  • Rule 12(b)(6) vs. summary judgment: At dismissal, the court tests whether the complaint plausibly alleges required elements; at summary judgment, the plaintiff must produce evidence that could persuade a reasonable jury.
  • Unjust enrichment (trade secrets): A damages measure aiming to strip profits gained from misappropriation; it requires proof the profits were caused by the misuse.
  • Reasonable royalty (trade secrets): A substitute measure: the court approximates what a license fee would have been for lawful use of the trade secret, even if the plaintiff can’t prove specific lost sales or the defendant’s profits.
  • Injunctive relief: A court order to stop or prevent further misappropriation or use; it is aimed at avoiding future harm rather than compensating solely for past loss.
  • Correlation vs. causation: Two events occurring together (revenue growth during misappropriation) does not, by itself, prove one caused the other.

Conclusion

Moxie Pest Control (Utah) v. Nielsen establishes two important clarifications in the Tenth Circuit. First, civil CFAA “loss” does not require pleading “technological harm”; reasonable, offense-directed investigative response costs can satisfy the statute. Second, under DTSA and UTSA, a plaintiff’s failure to prove causation for unjust enrichment does not automatically extinguish the trade-secret claims when other remedies—particularly reasonable royalties and injunctive relief—remain potentially available. The opinion both preserves CFAA viability post-Van Buren and refocuses trade-secret adjudication on a remedy-specific analysis rather than an all-or-nothing causation determination.