XML 30 R17.htm IDEA: XBRL DOCUMENT v3.7.0.1
Commitments and Contingencies
6 Months Ended
Jul. 04, 2017
Commitments and Contingencies Disclosure [Abstract]  
Commitments and Contingencies Commitments and Contingencies
Data Security Incident
Overview
On June 28, 2016, the Company announced that a data security incident compromised the security of the payment information of some customers who used debit or credit cards at certain Noodles & Company locations between January 31, 2016 and June 2, 2016. The malware involved in the incident has been removed, and the Company believes that it no longer poses a risk to credit or debit cards currently being used at affected locations. The Company continues to implement additional security procedures to further secure customers’ debit and credit card information.
Card Company Assessments
In the fourth quarter of 2016, the Company recorded a charge of $10.6 million for estimated losses, at the low end of an estimated range, associated with claims and anticipated claims by payment card companies for non-ordinary course operating expenses, card issuer losses and card replacement costs for which it expects to be liable (the “Data Breach Liabilities”). However, the Company may ultimately be subject to Data Breach Liabilities that are up to $5.5 million greater than that amount. The Company has used and intends to use a portion of the net proceeds of the private placement transactions entered into with L Catterton and Mill Road (both discussed in Note 9, Stockholders’ Equity) to fund the Data Breach Liabilities.
Data Security Litigation
In addition to claims by payment card companies with respect to the data security incident, the Company was a defendant in a purported class action lawsuit in the United States District Court for the District of Colorado (the “Court”), Selco Community Credit Union vs. Noodles & Company, alleging that the Company negligently failed to provide adequate security to protect the payment card information of customers of the plaintiffs and those of other similarly situated credit unions, banks and other financial institutions alleged to be part of the putative class, causing those institutions to suffer financial losses (the “Selco Litigation”). The complaint in the Selco Litigation also claimed the Company was negligent per se based on alleged violations of Section 5 of the Federal Trade Commission Act, and sought monetary damages, injunctive relief and attorneys’ fees. On July 21, 2017, the Court granted a Motion to Dismiss in the Selco Litigation in favor of the Company, which is subject to appeal by the plaintiffs. Any appeal must be filed on or before August 21, 2017.
Fees and Costs
The Company has incurred fees and costs associated with this data security incident, including legal fees, investigative fees, other professional fees and costs of communications with customers, all of which to date have been paid or reimbursed by its data security liability insurer. The Company expects to continue to incur significant fees and costs associated with the data security incident in future periods. Fees and costs related to the data security incident may also include other liabilities to payment card networks, liabilities from future litigation, governmental investigations and enforcement proceedings and capital investments for remediation activities, among others. The aggregate amount of such fees and costs cannot be reasonably estimated by the Company at present, but these fees and costs may be more than the limit that the data security liability insurer will pay or reimburse, in which case the Company will bear these fees and costs.
Insurance Coverage
As discussed above, to limit its exposure to losses arising from matters such as the data security incident, the Company maintained at the time of the incident and continues to maintain data privacy liability insurance coverage. This coverage, and certain other customary business insurance coverage, has reduced the Company’s exposure related to the data security incident. The Company will pursue the maximum recoveries available under these policies.
General
It is possible that losses associated with the data security incident could have a material adverse effect on the Company’s results of operations in future periods. The Company will continue to evaluate information as it becomes known and will record an estimate for additional losses at the time or times when it is probable that an additional loss, if any, will be incurred and the amount of any such loss is reasonably estimable.
Delaware Gift Card Litigation
As previously disclosed in prior reports filed with the SEC, the Company is named as a defendant in an action filed in the Superior Court of Delaware in New Castle County (the “Court”), entitled The State of Delaware, William French v. Card Compliant, LLC, et. al. The case was filed under seal in June 2013 and was unsealed on March 26, 2014. The complaint in this case alleges that a number of large retailers and restaurant companies, including the Company, knowingly refused to fulfill obligations under Delaware’s Abandoned Property Law by failing to report and deliver “unclaimed gift card funds” to the State of Delaware, and knowingly made, used or caused to be made or used, false statements and records to conceal, avoid or decrease an obligation to pay or transmit money to Delaware in violation of the Delaware False Claims and Reporting Act. The complaint seeks an order that the Company cease and desist from violating the Delaware Abandoned Property Law, monetary damages (including treble damages under the False Claims and Reporting Act), penalties, and attorneys’ fees and costs. On November 23, 2015, the Court ruled on a motion to dismiss the complaint. While the Court granted the motion to dismiss with respect to a claim alleging that the defendants intended to defraud the government or willfully concealed property owed to the government and for which a certificate or receipt was provided, it did not dismiss the other claims alleging that the defendants knowingly made false statements to avoid transmitting money to the government. The defendants have filed a motion for summary judgment in the case. The trial date with respect to this matter is set for May 21, 2018. In 2015 the Company recorded a loss contingency accrual based on a reasonable estimate of the probable losses that might arise from this matter; this loss contingency accrual did not have a material effect on our results of operations. However, the Company may ultimately be subject to greater losses resulting from the litigation. The Company intends to continue to vigorously defend this action.
Litigation Regarding Classification of Assistant General Managers

In the third quarter of 2016, the Company recorded a charge of $3.0 million to establish a reserve related to the settlement of a purported collective and class action lawsuit against the Company alleging violations of the Fair Labor Standards Act and certain state laws in connections with the Company’s classification of assistant general managers as exempt employees. In the second quarter of 2017, the Company recorded a gain of $0.4 million related to such settlement because the final amount determined to be owed by the Company under the settlement agreement was $0.4 million less than the amount reserved.
Other Matters
In the normal course of business, the Company is subject to other proceedings, lawsuits and claims. Such matters are subject to many uncertainties, and outcomes are not predictable with assurance. Consequently, the Company is unable to ascertain the ultimate aggregate amount of monetary liability or financial impact with respect to these matters as of July 4, 2017. These matters could affect the operating results of any one financial reporting period when resolved in future periods. The Company believes that an unfavorable outcome with respect to these matters is remote or a potential range of loss is not material to its consolidated financial statements. Significant increases in the number of these claims, or one or more successful claims that result in greater liabilities
than the Company currently anticipates, could materially and adversely affect its business, financial condition, results of operations or cash flows.