![]() |
[Home] [Databases] [World Law] [Multidatabase Search] [Help] [Feedback] | |
England and Wales High Court (Commercial Court) Decisions |
||
You are here: BAILII >> Databases >> England and Wales High Court (Commercial Court) Decisions >> Parkhouse & Anor v Sutcliffe & Ors [2025] EWHC 482 (Comm) (06 March 2025) URL: http://www.bailii.org/ew/cases/EWHC/Comm/2025/482.html Cite as: [2025] EWHC 482 (Comm) |
[New search] [Printable PDF version] [Help]
BUSINESS AND PROPERTY COURTS IN WALES
CIRCUIT COMMERCIAL COURT (KBD)
2 Park Street, Cardiff, CF10 1ET |
||
B e f o r e :
SITTING AS A JUDGE OF THE HIGH COURT
____________________
(1) PAUL PARKHOUSE (2) HARLEQUIN NEW HOMES LIMITED |
Claimants |
|
- and - |
||
(1) WILLIAM SUTCLIFFE (2) HARLEQUIN BRICKWORK LIMITED (3) VITS LIMITED (4) ASHOK BANGHER |
Defendants |
____________________
Simon Calhaem (instructed by Healys LLP) for the First and Second Defendants
James Couser (instructed by Carter Bells LLP) for the Third and Fourth Defendants
Hearing date: 16 January 2025
____________________
Crown Copyright ©
Judge Keyser KC :
Introduction
The Facts
"I should make it clear that HBL is our client, while HNH is not. If HBL, or any of our clients, instruct us to do something lawful then we follow those instructions. It is not for VITS to question commercial decisions taken by our clients, and that is reflected in the undertakings which I gave to hold the ring pending this application being heard with a proper time estimate. Clause 1(a) of the undertakings [i.e. given on 29 November 2024] provides an exception to the main undertaking in circumstances where I or VITS was 'Lawfully instructed otherwise by HBL'. This confirms both that HBL is VITS' client and also that VITS will be following lawful instructions received from clients. I should also add that, as is also confirmed by the wording of the undertaking, I do not accept that I was bound to offer that or any undertaking at all. The real dispute is between HNH and HBL or, perhaps more pertinently, between Mr Parkhouse and Mr Sutcliffe."
"The account is in the name of Harlequin Brickwork Ltd.
Paul Parkhouse was removed as a director of Harlequin Brickwork on 31st August, we discussed this a month or so ago as they wanted to set up a new account under Harlequin D&B/ Homes.
… Can you please remove Paul from the account. Once this has been done I will give you the numbers to remove from the account. … Can you please update me asap and let me know when he has been removed."
That action was taken, and later that afternoon Ms Rooney sent a list of numbers to be blocked and Mr Chatha confirmed that all those lines had been suspended.
"As a result of Paul's actions all the phones will now be frozen with immediate effect and all handsets need to be returned to Harlequin Brickwork.
…
We had no intention of cutting anyone off but Paul cannot ring up Vodafone remove Tina from the account and add himself that's Fraudulent (stated by Vodafone) and he is not involved in Harlequin Brickwork and cannot do that."
"10. As a result of Mr Parkhouse's actions, the mobile phone and IT system access was suspended to preserve the security of our data and communications.
11. The reason for this suspension was that the phones are tied to the IT system as a requirement to enter our IT systems remotely is by an authenticator app downloaded onto the company mobiles. The loss of control of the mobile phones would prevent HBL from accessing our systems unencumbered which in turn would effect [sic] our ability to fulfil our weekly payments to our subcontractor labour force. The construction industry is a very fickle and failure to pay your subcontracted labour will quite simply mean they walk off site at which point the business would have serious issues."
"As mentioned, today Paul is still trying to get numbers moved on Vodafone and telling Vodafone Tina has approved the changes, it's not true as you can see in the attached [screenshot of an email].
He can't ring up and do this[:] harlequin brickwork is not his company and that number belongs to the company not him personally.
Once he gets new contracts he can have the numbers transferred over to him, no issue with that.
We want to turn you back on asap but for that to happen we want our retentions £25,736.40 paid for brwk, scaff & contracting and then the £24,736.95 that is being chased by by [sic] stat demand for Kingsbury settled with Matt so Matt can repay us. The other funds he's chasing we can, as discussed sit down with Simon Burke and go through item by item and get them all dealt with and get it resolved.
If you can get this done we will turn the IT on this afternoon."
A further text message sent later that afternoon sought to "reiterate" that the primary reason for "turning off the IT" was concern about the security implications of Mr Parkhouse's intervention with Vodafone. The claimants say that this is to be viewed as a piece of backtracking after the true motive had been carelessly revealed. They draw support for that inference from the attendance note made by Capital Law of a conversation with Mr McGrail on 12 November 2024, which records him as saying, "We turned them off because he didn't pay bills, not as a pre-requisite."
"18. On 11th Nov 2024 …I had a briefing with my IT manager, Mr Alhatem, about the security breach that took place on Friday 8th Nov 2024. We reviewed the service desk request from Mr Sutcliffe on the 8/11/2024 at 3:46pm, and supporting evidence from the Vodafone email trail clearly stating that Mr Parkhouse had taken control and breached the mobile phone Application bundle account without consent from HBL. The Vodafone account belonged to HBL. Mr Alhatem acted on instructions from Mr Sutcliffe and the supporting evidence from Vodafone to mitigate the security risk.
19. VITS do not manage the mobile phone account this is managed directly by one of HBL's employees, Tina Rooney. VITS do not have access to this account.
20. VITS/Mr Alhatem acted in line with best security standards in line with Cyber Essentials and 13027001 security standards and adopted a zero-trust approach to the situation which was justified by the instructions that we received from our clients as to what had occurred.
21. The mobile phones potentially pose a huge security risk because they are used for accessing HBL's network remotely over VPN using MFA (multi-factor authentication), mobile banking, receiving OTP (one time passwords) for most cloud services including Sage Accounts. This resulted in temporarily revoking system access for HNH. However, the fact that it was VITS that metaphorically flicked the off switch does not mean that VITS was the party behind the decision to do so. As I have stressed repeatedly, if VITS receives instructions from a client to undertake some lawful action, then those instructions are actioned. There was nothing unlawful, in so far as VITS was concerned, in taking HNH off-line in the face of a security breach."
"I have just spoken with the care team agent and she said you have approved to unsuspend Paul's number …
Can you please authorise this by replying back to this email?
Paul has also asked if the other lines can be unsuspend and if we can tell him which numbers they are as I told him I could not give him this information. Paul is also arranged to set up a new account so we should soon be able to move these lines away."
Ms Rooney replied: "No I did not, I said he needs to set up his own Business account and once this is done, I will give authorisation to move the numbers across via the PAC code, he is not allowed access to any of these numbers." Mr Parkhouse observes that Vodafone did not assert or imply that he had claimed to be a director of HBL or that he had attempted to remove any telephone numbers of the WS Group from the Vodafone Account, and he denies that he did either of those things. He also suggests that the subsequent allegations that he had acted fraudulently have arisen from a misconstruction of the first line quoted above from Mr Chatha's email at 10.24am: because it it has (he suggests) been read as meaning that it was he who had told the customer care team that Ms Rooney had approved the removal of the suspension, though it does not say that.
"I received this letter from Paul's solicitors. I want to add that there was security breach where PP fraudulently tried to take over the Vodafone account. This poses a major threat to the IT systems because the Duo MFA is required for VPN remote access to the IT systems or OTP which is setup on the mobile phone. Also, the MS365 email platform equally requires MFA/OTP via the mobile phone to function and be secure."
"As detailed the reason the IT was cut off which does not appear to have been relayed to you by Mr Parkhouse.
As some background, post demerger (31/08/2024) it was expected that 'Paul' and the 'Homes Group' would setup their own phone contracts at which point the numbers would be transferred over to Paul and co. On Friday I asked Chris Pipe (The Group FD for Paul) how this was going as we do not want to continue recharging the costs indefinitely and we suggested that perhaps the phones are transferred to Pay as you go and then Paul and co can setup their contracts in their own time. This is neither unreasonable nor an attempt to cause issues.
However, in response, Paul took it upon himself to contact Vodafone and discuss our account with Vodafone knowing full well that he no longer has any capacity to do so, he is neither employed or a shareholder of the business. He chose to remove our office administrator as the contact and controller of the account and add himself, actions that Vodafone described as fraudulent.
I have attached emails from Vodafone showing he continued to act dishonestly again on Monday. Given that Paul is clearly not behaving well it was decided that access would be cut to the phones and IT for security reasons. The mobile phones of staff are tied to the IT access and the reason that we did this was it is felt that Paul was acting against our business and the fact that at present there are shared folders containing sensitive information that he had access to. So, we have taken measures to safeguard ourselves and our data.
We have the VITS company working through the security protocols and attempting to separate as many of the folders as possible to a point at which it safe to grant Paul access again. Attached is an email from VITS whereby they explain the security breach. [That is the email from Mr Bangher, already quoted.]
We have requested payment of bills but again that's not why Paul had his access removed. It appears that message wasn't relayed to you either and that Paul is painting a disingenuous picture to suit himself.
We are working to turn them on as quickly as possible once we feel we are secure."
"Having spoken with our IT company on this matter, 'of a security breach,' and due to the timings of your email.
It is totally, impractical to expect us to return IT services to your client when they have committed a fraudulent attempt to close down our telephone services.
In fact our telephone services have a direct link to our IT services. Our Contractors are paid through our IT system, so as I am sure you can understand we cannot risk wages being put under risk.
We are in discussions with VITS regarding the security breach and what can be done to protect our data from outside interference.
I do not expect this matter to be resolved quickly, but once VITS are happy that there can be no access of a direct or indirect nature, to our systems we will endeavour to reinstate the IT services to Homes by Harlequin. At this time I cannot give a definitive answer as to when this will happen. But I do have a duty of care as a Director of my business to protect my company which I am sure you will understand.
This will be of course subject to your client confirming in writing that no further fraudulent attempts will be made to access our systems.
Further I will need to take further direction from our company Lawyers with regard to their reply to your letter which is both provocative and has unrealistic time parameters. Our Lawyers will be in touch in due course, once we have concluded our meeting with them."
"After a very detailed security audit of all systems and services, VITS can conclude there are no further security breaches and with your written authorisation VITS are happy to turn on all IT services for Harlequin New Homes. Awaiting authorisation from the Managing Director of Harlequin Brickwork limited [sic] to turn IT systems back on again."
On the same day, Mr Sutcliffe forwarded that email to Capital Law and wrote:
"Please see the email below and the Incident Report by VITS. Can you obtain in writing from your client to confirm that he will adhere to the AUP [Acceptable Use Policy] for all IT systems and the phone/mobile system and will not attempt any further security breaches? Once I have this in writing I am happy to turn on all systems for Harlequin New Homes."
"Provided there is no notice period (or any penalty for 'early' termination), our client will be able to transfer its data and accounts over to a new IT provider within a short period of time. This will allow for the orderly separation of the systems between the two group companies. However, it will require the co-operation of both Vits and HBL.
Therefore, provided Vits do not attempt to delay the separation of the systems, our clients agree to abide by the AUP (insofar as they are able) for the period of transition to their new systems, and not act in a way which would compromise system and data confidentiality, integrity and availability. Whilst it remains our position that the policy would not be workable long-term, we do not envisage it causing any issues in the short time and provides the parties with an opportunity to transition the separation whilst their respective businesses continue to trade unhindered by a lack of IT provision. To be clear, our clients do not accept that they have intended to commit, or committed, any security breach, as alleged or otherwise.
We therefore ask that you provide the following by immediate return:
• Confirmation that HNH and its group companies will be reinstated with immediate access (by no later than 2:30pm today) to all their IT systems (including mobile phones) and all documents, data, accounts, telecoms or otherwise belonging to it, as previously enjoyed by them.
• Confirmation that Vits will not attempt to impose any form of notice period or penalty on our clients (or any group company belonging to our clients) for migrating its IT service requirements to an alternative provider.
• Confirmation that HBL and Vits will co-operate with HNH and its incoming IT provider and use all reasonable endeavours to ensure the smooth and timely transition of its data and accounts (including taking all necessary steps without delay).
• Confirmation that HBL will undertake all actions necessary to allow for the separation of telecoms.
• A copy of the IT Contract with Vits."
"Our Lawyers are instructed and are reviewing the various documents and will reply today to you[r] various letters.
Once we are all in agreement that your client will not attempt any further potentially damaging acts to compromise our company systems then we will be in a position to reinstate services.
As stated previously we will require Mr Parkhouse to confirm that he will not try and commit any further fraudulent attempts to gain access to our systems.
As for notice periods between HNH and VITS you will need to discuss this directly with VITS."
"6. As at the time of this letter, we are yet to receive the promised response from your lawyers, despite repeated assurances that we would receive it on Friday.
7. Further, HNH's employees have only been given access to their email accounts and some of HNH's server files and told that it was PP holding matters up, which we consider to have been a deliberate mistruth to create tension within HNH.
8. It remains unexplained why full access has not been granted, despite the confirmation given in our email of 12:32 on 14 November 2024.
9. This situation cannot continue. Our clients cannot sit back whilst you drip-feed access on a piecemeal basis. Without full access to the Systems, HNH cannot fully operate its business.
10. We require you to provide full access to the Systems by 12:30 today, failing which we will be instructed to apply immediately for an injunction, in respect of which Counsel has already been instructed.
11. Our clients cannot rely upon the assurances they have received from you to date, which have been demonstrably baseless.
12. We look forward to hearing from you as a matter of urgency."
"James and William from HBL have reiterated on several occasions that once Paul signs an agreement to confirm that he will not interfere with the systems and will not create any further security breaches, HBL are willing to allow full access. At this point we have nothing in writing from your client.
Part access was provided on Friday around 1:30pm to show a willingness to resolve matters. The reason why access hasn't been provided to the RDP server (Sage and Eque2) is because on the 28th October 2024 there was another incident that resulted in HNH deleting the sage accounts for the following companies:
- Harlequin Brickwork
- Harlequin Scaffolding
- Harlequin Contracting
- PPEKit
- ChefsKit
This resulted in VITS having to restore and reconfigure the sage server for access. NOTE: At this point HBL didn't remove access for HNH. James McGrail picked up the phone and engaged in dialogue with Chris Pipe the HNH Finance Director to ascertain what happened and it was resolved very quickly. Refer to incident report #20058.
Also, there was another attempted security breach by the employee John Louth even after you reassured us that all HNH will comply to the Acceptable Use Policy provided. Please refer to the incident report #20398.
Therefore, HBL are reluctant to authorise access to RDP server until PP signs an agreement giving assurance, he will not conduct further fraudulent activities or security breaches and this includes all employees of HNH.
Unfortunately, PP didn't make any effort to engage in any dialogue with several attempts made by me and HBL via Chris Pipe and other staff members at HNH which has prolonged the situation and PP has simply put his own business at risk. I believe all parties want to resolve this matter as quickly as possible and the only party dragging their feet is your client."
"We are instructed that on or about 8th November 2024, your client attempted to remove our client's Office Manager, Ms. Tina Rooney, as the administrator on their Vodafone account, seeking to install himself in this position without authorisation. We are advised that this account is owned and managed by Harlequin Brickwork Ltd (HBL) and is not associated with Harlequin New Homes Ltd (HNH).
This action represents a serious overreach and has resulted in significant disruption to our client's business operations. Furthermore, we are advised that your client's previous actions, including the alleged deletion of Sage accounts for several companies under the Harlequin Group and a series of unauthorised IT access attempts, demonstrate a repeated pattern of interference that has caused material disruption.
Our client has acted in line with recognised cybersecurity standards (ISO27001/Cyber Essentials) to secure its IT infrastructure and ensure the integrity of its operations. These measures were necessary following your client's actions, which posed significant risks to our client's business continuity.
Our client has made clear that access to critical IT systems and data will only be reinstated once your client provides written assurances that no further unauthorised or disruptive actions will be taken. Your client's failure to engage constructively or provide these assurances has unnecessarily prolonged the disruption.
We demand that your client immediately:
1. Cease and desist from any further unauthorised interference with our client's IT systems, telecommunications, or business operations.
2. Provide written assurances within seven 7 days of receipt of this letter confirming that:
• Your client will not interfere with the Vodafone account or IT systems;
• Your client and HNH employees will fully comply with the Acceptable Use Policy (AUP) provided by our client.
3. Engage in constructive dialogue to resolve the ongoing disputes and facilitate the orderly separation of IT systems between HBL and HNH."
"2. We are surprised at the content of your letter, given the assurances already provided on behalf of our clients in our email at 12:32 on 14 November … largely mirror the 'written assurances' demanded in your letter.
3. Our clients have been ready and willing to resolve matters from the outset, as demonstrated by the proposal set out in our email of 14 November 2024. Instead, your client has allowed a further 5 days to pass with our clients not having access to the IT systems, which systems you admit as being 'critical' to the running of their business.
4. For the avoidance of doubt, our clients vehemently deny that they acted fraudulently or that they intended in any way to cause disruption to the operation of the HBL Group as alleged, or at all. As such, our clients (including the directors, officers, employees and agents of HNH) have no issue in confirming that they will abide by the AUP insofar as they are able and will not act in a way that compromises system and data confidentiality, integrity and availability.
5. It is further denied that the 'alleged deletion of Sage accounts' and 'unauthorised IT access attempts' caused 'material disruption' to your client: …
…
8. Despite the limited access to the IT systems that our clients have been given since 15 November, their business operations remain effectively paralysed. Your client has been on notice of the ongoing daily loss suffered by our clients as a result, but they have chosen to hide behind spurious and unfounded allegations of fraud and exaggerated claims of interference with the IT Systems to delay matters.
9. In the circumstances, should our clients not have full access to the IT Systems (including access to the VPN, the use of their mobile phone numbers and their iPad sim cards) by 18:30 today, we will be instructed to immediately apply for a mandatory injunction against your client without further notice to you."
"1. Written Assurances
You state that your clients' comments and assurances 'largely mirror the written assurances' requested by our client. If this is the case, we are left to question why your clients have not provided the requested clear, written confirmation that they will refrain from any unauthorised interference with our client's systems, including phones or networks.
Such a confirmation, requiring only a simple signature, would have resolved this matter before escalation. Our clients confirm that they have previously communicated this to your clients, yet your clients have failed to act, leaving our client no option but to take protective measures.
2. Cause of Disruption
While your clients have denied acting in bad faith, the evidence we have reviewed clearly demonstrates unauthorised actions, including but not limited to the attempt to assume control of the Vodafone account under false pretences and unauthorised attempts to access restricted IT resources. These actions raised legitimate security concerns, prompting the protective measures taken by our client.
As of now, your clients' limited access to the IT systems is directly attributable to their actions, which required a security lockdown to protect data integrity and system availability for all users, not just your clients.
The cause of the current disruption is entirely attributable to the actions of your client. By attempting to remove our client's administrator from their Vodafone account—an account that is solely under the control of Harlequin Brickwork Ltd—your client has created the conditions necessitating these security measures. Any damage caused to Harlequin New Homes (HNH) is therefore self-inflicted.
3. Breaches of System Security
We suggest that your clients revisit the email trail from Vodafone, which clearly evidences your client's intent to remove our clients' administrator from the account. Further, we have been advised that there have now been four separate attempts to breach our client's IT systems. These actions represent a sustained pattern of unauthorised and inappropriate behaviour.
Your clients have repeatedly failed to provide written assurances that such breaches will not occur in the future, as requested. We fail to understand why. We once again request immediate confirmation, in writing, that your clients will not interfere with our systems in any manner.
4. Alleged Lack of Material Disruption
Your letter disputes the severity of the incidents caused by your clients. However, the removal of Sage folders by your client and the attempted access by Mr. Lough are examples of behaviour that raised legitimate security concerns, requiring our client to act to protect their business.
Your clients' actions involved an attempt to bypass the local Administrator Windows password. This computer is joined to the Harlequin Brickwork Ltd domain, and their actions were flagged as a security breach by the Panda AD260 antivirus solution.
Your assertion that this was a benign attempt to access documents does not align with the facts and demonstrates a clear violation of the Acceptable Use Policy (AUP). These incidents collectively undermined our client's confidence in the system's integrity. The removal of Sage folders and the attempted access to restricted files are objectively disruptive and inappropriate actions, regardless of intent.
5. Protection of Payroll and Business Operations
Our client's payroll system, which processes payments for 260-300 operatives weekly, is directly tied to the integrity of their IT systems. Any compromise to this system would have significant operational and reputational consequences, including the potential loss of workforce due to delayed payments.
Your clients' actions created an unacceptable risk to this critical function, which our client cannot and will not tolerate. Your characterisation of our client's actions as 'spurious' is unfounded. Our client's steps to secure the systems were both proportionate and necessary in light of the incidents in question, which you have not denied occurred.
6. Confirmation of Terms
Our clients position has remained consistent from the outset: they are prepared to restore limited access to the IT systems subject to your clients providing clear, written confirmation that they will comply with the AUP and refrain from any further unauthorised actions.
We ask again: do your clients accept these terms or not? This is a straightforward and reasonable request, and compliance will allow this matter to be resolved swiftly.
…
Our client is prepared to provide interim access to the IT systems for your clients [that is, pending separation of the IT systems], subject to the following conditions:
- Written confirmation and an undertakings from your clients that they will comply fully with the Acceptable Use Policy (AUP).
- Agreement from your clients to limit their access strictly to the resourcesnecessary for their business operations.
- Acknowledgment from your clients that any further unauthorised actions will result in the immediate suspension of access."
"The writer has been in a meeting this morning and we have been able to obtain limited instructions from our client in the short time frame presented.
From those instructions you should note that it is our clients intention to enable your client to be able to have access today but the details of that will be conveyed in our more detailed correspondence. We are confident that agreement can be reached between the parties by close of business today but we simply cannot revert to you substantially in the time frame presented.
Should any proceedings be commenced before close of business today we reserve the right to produce a copy of this letter to the court when determining the issue of costs."
"Our clients have instructed us that as of 7.30am today your clients have access to all the systems including telephone services. We enclose evidence of the same, being a screenshot of telephone usage incoming call of Chris P Work. In light of the enclosed, we strongly suggest that you do not serve any purported injunctive proceedings on our clients. Should your client be ill-advised to do so, we will refer the court to this correspondence on the issues of conduct when seeking indemnity costs."
"j. 20/11/2024 at 5:38pm: I received a call from Mr Sutcliffe that all systems can be switched back on including Mr Parkhouse tomorrow morning by 8am (21/11/2024).
k. 21/11/2024: VITS turned on the remainder access to RDS (Sage and Eque2) including emails for Mr Parkhouse at 7:30am (21/11/2024). All system back on before 8am.
l. 21/11/2024: VITS received confirmation around 7:45am from Chris Pipe that HNH had access to Sage and Eque2."
"The Claimants seek:
a) Declarations as to the rights and entitlements of the Claimants and their associated companies, following the demerger of the Harlequin Group, to the IT Systems, electronic documents and records, mobile phone numbers and sim cards ('the IT Systems and Telecoms services') which are in the possession or under the control of the Defendants and relate to the business of the Second Claimant and associated companies.
b) Declarations that the various actions taken by Defendants to interrupt or restrict the Claimant's access to the IT Systems and Telecoms Service constitute breach of contract, breach of trust and/or fiduciary duty, unlawful interference with the Claimants goods or property, intimidation and/or unlawful means conspiracy.
c) Further non-monetary relief as necessary to enforce the said rights and entitlements and ensure the Claimants and the associated companies are able to access the IT Systems and Telecoms Services without interference from the Defendants, including, as necessary and without limitation, injunctive relief, specific performance, delivery up and/or proprietary restitution."
Under "Value", the claim form read: "As the Claimants are not yet able to ascertain the extent or quantify the damage caused by the Defendant's [sic] actions the claim is, at present, limited to non-monetary relief."
"It remains open to your client to accept the confirmations provided by Mr Parkhouse on 20 November and to confirm that access to the IT systems and phone network will remain in place until the systems and accounts have been separated. Should such acceptance be forthcoming, the hearing of our clients' Application on 29 November 2024 at 11:30am at the Cardiff District Registry can instead just deal with the question of costs, which our clients will be seeking to recover from your client and the other Defendants."
"Our client cannot agree to the inclusion of A in the document as they do not have access or authority in respect of mobile phone accounts. Our client only offers IT services. This should be removed as it only appears to be relevant to HBL not our client.
Once this has been removed our client will further review the undertaking document."
Capital Law sent a revised text for undertakings by VITS and Mr Bangher, removing the reference to the telephones, and Carter Bells replied:
"My client is inclined to agree and sign the document provided but he does have some concerns, namely, if there is a third party security issue such a ransomware attack our client he would have to lock down all systems (contrary to the undertaking). Secondly, if there were any further security breaches from PP where HBL would then inclined and our client following standard working practices would have to lock down the system (we note the 4 security issues we have already identified in previous correspondence).
Subject to the above not occurring, my client has no issue in agreeing to the undertaking. However, he cannot sign an undertaking for blanket access should the above instances occur. Can you please review with your client and revert back. It may be the two above points require mentioning in the Undertaking form, as instances where action may be (although very unlikely) required, so my client can then sign."
After some further revisions, a text agreeable to VITS and Mr Bangher was produced that afternoon.
"Our clients would be willing to agree to your proposed timetable for an adjournment of the Application. However, unless your clients agree to provide our clients with the assurances that their access to the IT systems will not be removed pending the completion of the migration, they will need to seek that interim relief and further directions from the Court at the hearing listed on 29 November 2024. Given your clients' actions in removing complete access and the unsatisfactory piecemeal reinstatement of that access (and the ensuing impact on our clients' business operations), there is a real risk that your clients' pattern of behaviour on these issues will reoccur."
- The claimants gave an undertaking in damages in respect of Mr Sutcliffe and HBL and all companies in the WS Group.
- The claimants gave undertakings to use HBL's servers in accordance with HBL's AUP and to limit their access to the servers to the resources reasonably necessary for their business operations.
- Mr Sutcliffe and HBL gave undertakings not to interfere with or interrupt the claimants' existing level of access to the IT System and the Vodafone Account.
- VITS and Mr Bangher gave undertakings to take all possible and necessary steps to ensure that the claimants had full and uninterrupted access to the IT System in respect of the business of the claimants and the companies in the PP Group.
(The undertakings given by the claimants, Mr Sutcliffe and HBL at the hearing on 29 November 2024 were substantially similar to those proposed by Healys on 28 November 2024.)
"We are instructed that today at 08:03, your clients employee Andrew Johnson has breached your clients undertakings provided to the Court under order dated 11 December 2024 at paragraph 3(b) i and ii. The paragraph states:
'i. Comply with the Second Defendants' Acceptable Use Policy insofar as it applies to their use of the Second Defendants domain and servers;
ii. Not act in a way that compromises the system and data confidentiality, integrity and availability of the electronic accounts, electronically held documents and IT systems relating to the Second Defendant or any of the companies listed in Schedule B (including but not limited to all Sage accounts and payroll software); and'
Contrary to the above undertaking, we are instructed that Mr Johnson emailed the 4th Defendant seeking to remove the requirement that all passwords on the 2nd Defendants IT Systems have to be changed every three months. Enclosed with this letter is the email chain with the 4th Defendant and your client.
Despite Mr Johnson being informed that this action was in breach of the Acceptable Use Policy in correspondence at 08:58, Mr Johnson continued to attempt to force the 4th Defendant to remove the requirement for passwords to be changed."
The letter described this as "an unequivocal breach of the undertakings" and as "the second time your client has acted maliciously towards the integrity of our clients IT systems." Capital Law replied:
"a. Mr Johnson emailed Vits asking that the password change prompt be removed from the HNH accounts for 5 days.
b. Vits responded to Mr Johnson, stating that the password change prompt would not be removed.
c. The password change prompt therefore remains in place in respect of the IT systems.
d. Making a request for a discrete part of the AUP to be applied differently to HNH for a period of 5 days is neither (a) non-compliant with the AUP or [sic] (b) acting in a way that compromises the system and data confidentiality, integrity and availability of the electronic accounts, electronically held documents and IT systems relating to the Second Defendant or its related companies."
In a subsequent letter, written after taking further instructions, Capital Law wrote: "The reaction to Mr Johnson's request is disproportionate and gives a misleading impression of Mr Johnson's actions."
Costs: the Law
"(1) The court has discretion as to –
(a) whether costs are payable by one party to another;
(b) the amount of those costs; and
(c) when they are to be paid.
(2) If the court decides to make an order about costs –
(a) the general rule is that the unsuccessful party will be ordered to pay the costs of the successful party; but
(b) the court may make a different order.
…
(4) In deciding what order (if any) to make about costs, the court will have regard to all the circumstances, including –
(a) the conduct of all the parties;
(b) whether a party has succeeded on part of its case, even if that party has not been wholly successful; and
(c) any admissible offer to settle made by a party which is drawn to the court's attention, and which is not an offer to which costs consequences under Part 36 apply.
(5) The conduct of the parties includes –
(a) conduct before, as well as during, the proceedings and in particular the extent to which the parties followed the Practice Direction – Pre-Action Conduct or any relevant pre-action protocol;
(b) whether it was reasonable for a party to raise, pursue or contest a particular allegation or issue;
(c) the manner in which a party has pursued or defended its case or a particular allegation or issue;
(d) whether a claimant who has succeeded in the claim, in whole or in part, exaggerated its claim; …
(6) The orders which the court may make under this rule include an order that a party must pay –
(a) a proportion of another party's costs;
(b) a stated amount in respect of another party's costs;
(c) costs from or until a certain date only;
(d) costs incurred before proceedings have begun; …"
"Court's discretion as to costs: rule 44.2
4.1 The court may make an order about costs at any stage in a case.
4.2 There are certain costs orders which the court will commonly make in proceedings before trial. The following table sets out the general effect of these orders. The table is not an exhaustive list of the orders which the court may make."
The table sets out a range of possible orders, including costs in the case, costs in any event, costs reserved, and costs in the application.
"(1) Unless the court orders otherwise, a claimant who discontinues [a claim] is liable for the costs which a defendant against whom the claimant discontinues incurred on or before the date on which notice of discontinuance was served on the defendant."
"I accept of course that the issue was one for the judge's discretion. In my view, this is one of those cases where this Court is entitled and indeed bound to interfere with that exercise. I say so for basically three reasons: the first one is that the decision seems to me to be inherently unjust. It is quite plain from the passage in the judge's judgment from which I quoted that he granted or continued the [in]junction on the basis of the balance of convenience in order to hold the ring until the dispute between the parties could be properly decided at a trial. It is inconsistent with an order such as that, that there should be successful or unsuccessful parties for the purposes of the rules either new or old.
Second, it seems to me that the judge was wrong, therefore, in determining, for the purposes of rule [44.2(2)(a)], that either Mr Richardson was the unsuccessful party, or, alternatively, that the employer was the successful party. He was right to consider within the terms of that rule whether to make an order about costs. That was what he did. But the order that he made was, going back to rule [44.2(1)(a)], whether the costs should be made payable by one party to another. That seems to me to have been wrong; there were no successful or unsuccessful parties at that stage and the proper orders to be considered were those under the terms of the practice direction to which I have referred."
(The terms of the applicable practice direction to which Morritt LJ was referring were materially the same as those which I have set out above from the current Practice Direction to Part 44.) I take the case to establish that, where an interim injunction is granted or continued on the basis of the balance of convenience, the normal order for costs will be that costs be reserved.
"(1) In a case without any other special factors, where a claimant obtains an interlocutory injunction on the basis of the balance of convenience, the court normally reserves the costs. While one can see an argument, particularly under the new regime, for saying that an order more favourable to the claimant should be made on the basis that the claimant has won the issue in respect of which the costs have been directly incurred—namely, whether an interlocutory injunction should be granted or not—it seems to me that the reasoning of the Court of Appeal in the so far unreported case of Desquenne et Giral U.K. Ltd v. Richardson, November 23, 1999 indicates that an order reserving the costs is appropriate. …
(2) As this present issue concerns the question of costs, it would plainly be wrong to treat Richardson, even bearing in mind that it is a recent decision of the Court of Appeal, as authority which ties the court's hands when it comes to the question of costs in a case such as this. However, in my view, it is plainly undesirable that there should be inconsistency of approach to questions of costs between different courts. …
(3) A defendant who accedes to the grant of an interlocutory injunction before the hearing should not, for that reason alone, normally be the subject of a more disadvantageous order for costs than if he had fought and lost. …
(4) There will obviously be circumstances where it is right to depart from the general approach. Thus there may be cases where the balance of convenience is so clear, and the outcome of the hearing of the application for the interlocutory injunction should be so plain to the parties, that the court should conclude that an order should be made against the defendant for wasting time and money in fighting the issue (whether or not the defendant eventually concedes).
(5) It is also important to bear in mind that an order for costs reserved or an order for costs in the case may not turn out to be as sensible and fair as it seems at the time it is made. In Kickers International S.A. v. Paul Kettle Agencies Ltd [1990] FSR 436, at 438, Hoffmann J pointed out that very often there is no trial. If there is no trial then the order for costs, whether it is reserved or in the case, effectively might as well not have been made. In some circumstances, that is a point which has less force than might appear, because, if the case does not go to trial, it may settle and, if it settles, the parties are perfectly able to take into account the potential order for costs, which costs reserved or costs in the case involves. However, the court should bear in mind that the case may not go to trial and may not settle, and that it is undesirable to encourage parties to go to trial or to discourage them from settling by having the uncertainty of an order for costs—such as costs reserved or even costs in cause—hanging over them. So far as the apparently preferred order of costs reserved is concerned, there is the additional problem identified by Mr Justice Hoffmann, which he describes at 438, as: 'the difficulty of reconstructing for the trial judge how things looked at the time of the interlocutory application, particularly when it involved questions of balance of convenience which were irrelevant at the trial'.
(6) In this context it seems to me that the court should adopt a realistic attitude where it is fair and possible to do so as to whether the case is likely to go to trial or not. At one extreme, one has Richardson, where the interlocutory injunction was granted or, more accurately, continued when the judge also ordered a preliminary issue, which was fixed to come on for hearing less than five weeks later. In that case, one can well understand the Court of Appeal thinking the judge should have anticipated that, not only would the main issue in the trial be determined, and determined very shortly, but also that the issues and arguments at the interlocutory stage would be very much in everyone's mind. At the other extreme, there are the facts of Direct Line Group Ltd v. Direct Line Estate Agency Ltd [1997] FSR 374, where Laddie J. formed a very clear view as to the merits: while he was only granting an interlocutory injunction, he not only made a favourable order for costs to the claimant but ordered those costs to be assessed and paid forthwith. In that case, it seems to me the tone of his judgment indicates that, not merely did he think that the substantive merits were very plain, but that, particularly in light of his judgment, he did not expect the case to go any further.
(7) On the other hand, where the court takes the substantive merits into account at the interlocutory stage, it must be careful, before also taking them into account on the question of costs. If, as in Direct Line, the court's view on the merits is based on incontrovertible facts or the construction of a document which is accepted by the parties as governing their relationship, then that is something which the court can, to my mind, properly take into account as pointing towards a more favourable order for costs from the claimant's point of view than costs reserved. On the other hand, if the court is faced with disputed facts, and believes the claimant's version of the facts is more likely to be accepted, it may be dangerous to take that into account in the claimant's favour when deciding what to do about costs. It is obviously conceivable that at trial the court's preliminary, even its strongly held, view as to the likely outcome of the dispute on fact may turn out to be wrong. It would be adding insult to injury if an unfavourable order for costs is made against the defendant, in addition to the injunction being granted at the interlocutory stage, on the basis of a wrong (as it turned out) view of the facts by the court.
(8) … While unnecessary for me to rule on the point, it may be that, at least in some cases, a claimant who brings an unsuccessful application for an interlocutory injunction is more at risk on costs than a defendant who unsuccessfully resists an application for an interlocutory injunction. In the one case, it is the claimant's choice to come to court. In the other case, the defendant is effectively forced to come to court. Perhaps one should not make too much of that distinction, because, in many cases where a claimant comes to court to seek an interlocutory injunction, it transpires, either at the hearing of the interlocutory application or at the final hearing, that the defendant has brought the proceedings on himself and has left the claimant with no alternative but to bring the proceedings. …"
The Arguments
Claimants
"23. When the court is examining the adequacy in response to a letter before action, in my judgment the court must bear in mind the perspective of the person who receives that response. As Fox Gregory had made clear to Hamptons, they were of the opinion that Mrs Spinks had removed confidential information. They had also had a telephone conversation with Mr Knowles in which he had made it clear that Hamptons effectively thought that there was no need for them to take any action. They had also had, it seems to me, at best a non-committal response of 21 November that Hamptons were investigating the matter, and of course this is in some senses a promising reply, but it gave no credit to the matter being urgent and made no attempt at giving the assurance which had been sought.
24. Hamptons had had the letter of 15 November, which specified a considerable amount of information which Mrs Spinks was alleged to have taken. Hamptons should, in my judgment, have seen that if Mrs Spinks gave them any of that information, they would have to hand it over to Fox Gregory as, in due course, they did give some limited information. We are told that on 25 November counsel for Hamptons told counsel for Fox Gregory that they had only got this amount of information, which was later handed over, and that it would be handed over, but one has to remember that by 25 November proceedings had been started and indeed undertakings had been given.
25. On the receipt of the letter of 21 November 2005, Fox Gregory had, as Mr Choudhury accepted in his argument, to make a judgment as to what to do next. In my judgment, their response was to write back to Hamptons and state that, in the light of their reply, they would issue a proceedings and to go on, in due course, to issue those proceedings was a reasonable step to take. Moreover, in my judgment, the interim relief which they sought in their application was reasonable and there was nothing untoward in the form of that interim relief, which took it totally out of the order of the relief which they had indicated they would be seeking. Every day counted so far as Fox Gregory was concerned. It is well known that it is difficult and costly to prove misuse of confidential information and loss arising from that matter once those matters actually occur. Accordingly, in my judgment the respondent's submission that their response to the letter before action was adequate does not succeed.
…
28. The next question is whether it would be possible to say who was the winner and who was the loser. The only issue, in my judgment, was whether interim relief in the form of the undertakings would have been given if the undertakings had not been given. That, as I see it, is the substance of the issue before the court on 29 November. As I have explained, no significant costs were incurred on the other matters. In my judgment, if one looks at that issue then it is clear that the winner was Fox Gregory, rather than Hamptons, because Hamptons had to give those undertakings, and for this reason I would take the view that the judge was wrong in principle to say that Hamptons was substantially the winner.
29. The return date on the 2 December was simply a follow on from the application on the 25 November. The position is that one of the undertakings included the giving of an undertaking and all the matters were adjourned until after that affidavit was given. That affidavit was served, we are told, about 4.00 pm on 30 November. It was not until after 6.00pm on the following day, 1 December, that Fox Gregory indicated they would not be proceeding for the application for relief. In my judgment it was reasonable for Fox Gregory to take a little time to consider the evidence and that they should not be penalised in costs because they had not come back, as Mr Choudhury submitted they should have done, at the start of business on 1 December.
30. I turn back to the undertakings of 25 November. It cannot, in my judgment, be correct to say, as the respondent would argue, that these undertakings were but a minor matter. The fact is that the costs of applying to the court for a hearing on that date would have been avoided if there had been a more positive and promising response to the letter before action. The obtaining of the undertakings was, in my judgment, a significant success and thus, as I have explained, the judge's exercise of discretion amounted to an error of principle when it took no account of this substantial success."
Picking up references to considerations in that case, Miss Clarke submits that the communications from the defendants have to be looked at from the claimants' perspective, when they were attempting to run their business without proper access to the telephone and IT systems. From their point of view the matter was one of urgency, and they were not receiving unequivocal responses that could easily have been given. They were justified in commencing proceedings, which the defendants could have avoided, and they obtained undertakings that effectively resolved the situation.
First and Second Defendants
Third and Fourth Defendants
Discussion and Conclusions
(i) 15 October: An explanation of this incident has been given by Mr Parkhouse. However, it suffices to note that VITS did not make an incident report and that no one treated it as involving anything that required protective action or any other consequence. It appears to be relied on by the defendants simply as a forensic tool.
(ii) 28 October: This did give rise to an incident report, but at the time a realistic view of it was taken. It was not treated as anything like a hostile act, but rather as a failure by Mr Pipe to realise that what he was doing affected the use of the Sage system by others.
(iii) 8 November: There is a genuine issue as to the nature of this incident. Did Mr Parkhouse really not know that the Vodafone Account was held by HBL? Did Vodafone really tell him that the account was in his name? I cannot resolve these issues. Two things, however, can be said. First, even if Mr Parkhouse acted in good faith, his conduct was thoughtless and hard to justify, because the communication he received from Mr Pipe did not give reasonable grounds for supposing that HBL was making a threat of disconnection. Second, on the other hand, it appears that the extent of what happened was an attempt to secure control of the account in order to prevent HBL denying HNH the use of the account, not to deprive HBL of the use of the account. That does not excuse Mr Parkhouse's conduct—I regard his behaviour as unjustified even on the most favourable view—but it does tend to deflate exaggerated claims about security breaches.
(iv) 11 November: There is an issue as to the nature of this incident also. The defendants have characterised it as involving impersonation of Ms Rooney, but it is not at all clear whether this characterisation is correct. Another possibility is that somebody told Vodafone that Ms Rooney had authorised the unblocking of access; another is that someone at Vodafone got the wrong end of the stick. I cannot resolve the issue. But, similarly, the defendants' characterisation of the incident as one of fraud and impersonation seems to me to go beyond the inferences that could properly be drawn; though I accept that, after the incident the previous week, they were liable to be suspicious. It is, further, worth noting that the incident did not involve an attempt to interfere with HBL's use of the account; it was rather an attempt to restore HNH's access to the account. This is material when one considers the notion that it presented a genuine security risk.
(v) 15 November: This was improper conduct by Mr Louth and an attempt to bypass the security system. It should, however, be remembered that it began and (so far as I can tell) continued at times (13 to 15 November) when HNH and the PP Companies did not have any access at all to the IT System and that Mr Louth was attempting to gain access to files of the PP Group, not those of the WS Group. The evidence does not persuade me that the defendants were being exposed to a genuine security risk. The defendants' response to this incident strikes me as overblown. I accept that the last attempts to bypass the security system, on 15 November, came after Capital Law had confirmed on the previous day the claimants' willingness to abide by the AUP. Even so, it is not clear why this matter should have been relevant to a decision not to restore full access to the PP Companies and to Mr Parkhouse personally.
(vi) 13 December: Mr Calhaem calls this incident "a clear and unequivocal breach of the undertaking", which is how the first and second defendants have treated it. I do not regard it as such. The AUP did not require passwords to be changed every 90 days. VITS's practice of applying the requirement for change "on a recurring basis" by requiring a change every 90 days seems very sensible, but it is also possible to see Mr Johnson's request for a flexible application of the requirement of the AUP (and disapplication of the 90-day interpretation) as also sensible in the circumstances. Mr Alhatem was understandably put out by Mr Johnson's rather strong tone, and Mr Calhaem may well be right to say that the latter's emails reflect badly on the claimants' attitude in the circumstances; but to treat those emails as a breach of undertaking seems to me to be incorrect, and I think that Capital Law were right to say that the reaction to Mr Johnson's emails was disproportionate and gave a misleading impression of their nature.
1) The first and second defendants should pay the claimants' costs up to and including 20 November 2024. These are, in broad terms, the costs of obtaining full access to the IT System, including the preparation of the injunction application.
2) The claimants and the first and second defendants should bear their own costs up to and including the date of the hearing on 29 November 2024.
3) The costs incurred thereafter should be paid by the claimants to the first and second defendants. The proceedings had been overtaken by events as soon as they were issued, and after 29 November the undertakings then given, in the light of the migration of the IT services, made the further conduct of the case nothing more than an exercise in the pointless incurring of costs.
These conclusions take into account matters of conduct, although the conduct in question is not necessarily reflected entirely in the corresponding stages of the award (in particular, the first stage). The costs should be assessed on the standard basis. If the parties cannot agree the figures, they can request a summary assessment, which I shall conduct on the papers.