Pandemic Darlings The pandemic economy, in original documents
Home Court filings Bofa Ca Unemployment In re: Bank of America California Unemployment Benefits Litigation — S.D. Cal., No. 21-md-02992 Exhibit N — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-16, S.D. Cal. No. 3:21-md-02992)

Court filing

Exhibit N — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-16, S.D. Cal. No. 3:21-md-02992)

Filed January 8, 2026 in In re Bank of America California Unemployment Benefits Litigation; one of 1415 filings from this case.

Record facts

CourtU.S. District Court for the Southern District of California
Filed2026-01-08

U.S. District Court for the Southern District of California · No. 3:21-md-02992-GPC-MSB · Doc. 623-16 · 2026-01-08 · Docket on CourtListener

Full text

EXHIBIT N
 REDACTED
Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45082 
Page 1 of 8

 
 
 
  
 
 
 
 
 
 
 
 
EXHIBIT
 
N
FILED
PROVISIONALLY
UNDER SEAL WITH
REDACTIONS
PURSUANT TO
STIPULATED
PROTECTIVE ORDER 
Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45083 
Page 2 of 8

UNITED STATES DISTRICT COURT 
SOUTHERN DISTRICT OF CALIFORNIA 
 
 
IN RE BANK OF AMERICA  
CALIFORNIA UNEMPLOYMENT 
BENEFITS LITIGATION 
 
 
Case No. 3:21-md-02992-GPC-MSB 
 
 
 
 
 
 
 
 
 
 
 
EXPERT REBUTTAL REPORT OF NATALIE LOEBNER 
 
April 4, 2025 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45084 
Page 3 of 8

Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45085 
Page 4 of 8

Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45086 
Page 5 of 8

14 
and regulators have issued public warnings and brought numerous card skimming 
cases.13 These compromises have been known to occur at ATMs, gas stations, and 
other locations with publicly accessible terminals accepting debit cards with PIN 
input.14 PIN inputs are generally required at non-ATM terminals where the card or 
terminal is not EVM chip-enabled.  
29. 
Based on my experience engaging with financial institutions, card 
skimming is a risk with which banks issuing debit and prepaid cards are familiar, 
both before and during the COVID-19 pandemic. Financial institutions reduce this 
risk by implementing processes and procedures to detect and mitigate the risk of 
card skimming. Common measures to identify and mitigate card skimming risks 
include: (1) monitoring transactions to detect point-of-sale (POS) terminal usage 
 
13 The FBI Scams and Safety webpage, https://www.fbi.gov/how-we-can-help-you/scams-and-
safety/common-frauds-and-scams/skimming, cautions the public on the various techniques used 
to compromise cardholder PINs. Similarly, the U.S. Secret Service webpage, 
https://www.secretservice.gov/investigations/skimming, states the Service investigates hundreds 
of cases a year and advises that PIN compromise occurs at a variety of common merchants like 
pharmacies, gas stations, and grocery stores. The webpage also highlights the recommendation to 
use chip enabled cards to reduce the exposure of the cardholder’s PIN as merchant locations. In 
2018, the Federal Trade Commission (FTC) issued a consumer alert related to card skimming, 
https://consumer.ftc.gov/consumer-alerts/2018/08/watch-out-card-skimming-gas-pump. The 
Office of the Comptroller of the Currency (OCC) identifies advances in card skimming 
technology in its Fiscal Year 2018 Bank Supervision Operating Plan, https://www.occ.gov/news-
issuances/news-releases/2017/nr-occ-2017-113a.pdf, and 2019 Fall Semiannual Risk 
Perspective, https://www.occ.gov/publications-and-resources/publications/semiannual-risk-
perspective/files/pub-semiannual-risk-perspective-fall-2019.pdf.   
14 United States Secret Service, U.S. Secret Service Serves up Cold Dish of Justice to Gas Pump 
Skimmers, U.S. Secret Service Media (November 22, 2018), 
https://www.secretservice.gov/press/releases/2018/11/us-secret-service-serves-cold-dish-justice-
gas-pump-skimmers (Press release regarding a nationwide initiative called Operation Deep 
Impact to combat the targeting of gas stations noting the identification of nearly 200 skimmers.) 
Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45087 
Page 6 of 8

15 
that connects numerous cards to suspicious ATM withdrawal or purchase patterns; 
(2) physically inspecting ATMs to identify skimming devices; (3) proactively 
flagging transactions associated with compromised ATMs and POS terminals; and 
(4) leveraging skimming indicators placed on transactions to streamline transaction 
holds and cardholder engagement.15 
30. 
It is my opinion that the Bank was aware of and treated card 
skimming as a risk before and during the Bank’s deployment of CFF-1. My 
opinion is supported by records I reviewed in this case in which Bank employees 
expressly discussed card skimming. Further, the Bank was publicly highlighted in 
Department of Justice press releases during the relevant timeframe as either 
assisting law enforcement with card skimming investigations or otherwise 
acknowledging having customers as card-skimming victims.16 Nonetheless, the 
 
15 BANA_EDD_MDL-00057505 (Email from Bradley Garfield on October 30, 2020, to John 
Denning and Ruchira Ghosh noting a handful of common transaction attributes financial 
institutions use to detect and address card skimming, although not incorporated into CFF-1). 
16 A sampling of DOJ press releases illustrative of the prevalence of the risk before and during 
the Class Period: Twelve Individuals Charged in ATM Skimming Conspiracy (November 16, 
2016), https://www.justice.gov/archives/opa/pr/twelve-individuals-charged-atm-skimming-
conspiracy (a 2016 case where skimming devices were found at Bank of America locations.); 
Romanian Citizen Pleads Guilty in ATM Skimming Conspiracy (March 29, 2017), 
https://www.justice.gov/archives/opa/pr/romanian-citizen-pleads-guilty-atm-skimming-
conspiracy (a 2017 case identifying both Bank of America and PNC Bank customers as victims); 
Romanian National Sentenced for Multi-State ATM Card Skimming Scheme (June 3, 2019), 
https://www.justice.gov/archives/opa/pr/romanian-national-sentenced-multi-state-atm-card-
skimming-scheme (a 2019 case noting keypad overlays as one of the ways PINs were 
compromised); Seven Members and Associates of Large-Scale Gas Pump Skimming Device 
Organization Charged with Racketeering and Money Laundering Conspiracies (May 8, 2024), 
https://www.justice.gov/archives/opa/pr/seven-members-and-associates-large-scale-gas-pump-
 
Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45088 
Page 7 of 8

Case 3:21-md-02992-GPC-MSB     Document 623-16     Filed 01/08/26     PageID.45089 
Page 8 of 8

File and source

File
gov.uscourts.casd.709615.623.16.pdf
Size
946,623 bytes
SHA-256
4db9b943d7ea84d2c8129ddb1393b845f763c23f849dfe64a206fd582a74ddbc
Our copy
gov.uscourts.casd.709615.623.16.pdf
Original
PACER (login required)
  1. Exhibit A — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-3, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  2. Exhibit M — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-15, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  3. Exhibit B — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-4, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  4. Exhibit L — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-14, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  5. Exhibit C — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-5, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  6. Exhibit K — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-13, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  7. Exhibit D — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-6, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  8. Exhibit J — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-12, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  9. Exhibit E — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-7, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  10. Exhibit I — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-11, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  11. Exhibit F — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-8, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  12. Exhibit H — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-10, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  13. Exhibit G — In re Bank of America California Unemployment Benefits Litigation (Dkt. 623-9, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  14. Exhibit E — In re Bank of America California Unemployment Benefits Litigation (Dkt. 620-7, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  15. Certificate of Service by Consolidated Plaintiffs re 619 Sealed Lodged — In re BofA Unemployment Litigation (Dkt. 624)same case · 2026-01-08
  16. Exhibit D — In re Bank of America California Unemployment Benefits Litigation (Dkt. 620-6, S.D. Cal. No. 3:21-md-02992)same case · 2026-01-08
  17. Plaintiffs’ Opposition to Defendant’s Motion to Excludesame docket · 2026-01-08
  18. Exhibit C — In re Bank of America California Unemployment Benefits Litigation (Dkt. 620-5, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  19. Exhibit B — In re Bank of America California Unemployment Benefits Litigation (Dkt. 620-4, S.D. Cal. No. 3:21-md-02992)same docket · 2026-01-08
  20. 23 Reported by: — In re Bank of America California Unemployment Benefits Litigation, MDL No. 2992same docket · 2026-01-08

Part of: BofA Ca Unemployment · U.S. District Court for the Southern District of California · Pandemic unemployment insurance · Lender and platform litigation · Exhibits and declarations · 2026 · Court filings

Back to top