Digital Doors v. Sandy Spring Bank: Four-Patent Cybersecurity Suit Dismissed With Prejudice
Digital Doors, Inc. filed suit against Sandy Spring Bank in the District of Maryland asserting four patents covering Sheltered Harbor certified data protection systems. The plaintiff voluntarily dismissed the action with prejudice under Rule 41(a)(1)(A)(i) — before the bank filed any responsive pleading — ending the case in 289 days.
Sheltered Harbor patent suit ends before Sandy Spring responds
On 1 January 2025, Digital Doors, Inc. filed a patent infringement complaint against Sandy Spring Bank in the U.S. District Court for the District of Maryland (Case No. 8:25-cv-00002), presided over by Judge Lydia Kay Griggsby. The suit alleged infringement of four patents — US10250639B2, US10182073B2, US9734169B2, and US9015301B2 — collectively covering Sheltered Harbor certified and compliant systems and methods for financial data vault protection.
The case closed on 17 October 2025 when Digital Doors filed a notice of voluntary dismissal with prejudice pursuant to Federal Rule of Civil Procedure 41(a)(1)(A)(i). That procedural avenue is available precisely because Sandy Spring Bank had not yet filed an answer or a motion for summary judgment, meaning the dismissal was self-executing and required no court order. The with-prejudice designation is legally significant: Digital Doors permanently relinquished the right to bring the same claims against Sandy Spring Bank on these four patents.
The 289-day duration from filing to closure, combined with dismissal before any responsive pleading, is consistent with a negotiated resolution or commercial decision rather than a litigated defeat. The public record does not disclose whether a settlement agreement, licensing arrangement, or commercial understanding was reached between the parties. What remains unknown is the consideration, if any, that moved between the parties — and whether Digital Doors has pursued or intends to pursue similar claims against other financial institutions using Sheltered Harbor compliant infrastructure.
Filing to Voluntary dismissal in 289 days
289 days — resolved before any answer or summary judgment motion was filed
Dismissed with prejudice: what Rule 41 closure means for both parties
Rule 41(a)(1)(A)(i): self-executing dismissal with prejudice
Federal Rule of Civil Procedure 41(a)(1)(A)(i) permits a plaintiff to dismiss without a court order at any point before the defendant serves an answer or a motion for summary judgment. Here, Digital Doors invoked that right but coupled it with a with-prejudice designation — a voluntary choice that permanently extinguishes the dismissed claims. No judge signature was required; the filing itself effected the closure.
Rule 41(a)(1)(A)(i) — no court order neededWith prejudice: Digital Doors cannot refile these claims against Sandy Spring
A dismissal with prejudice operates as a final adjudication on the merits under res judicata doctrine. Digital Doors is permanently barred from asserting the same four patents — US10250639B2, US10182073B2, US9734169B2, and US9015301B2 — against Sandy Spring Bank in any future action. This is materially different from a without-prejudice dismissal, which would preserve the plaintiff’s option to refile. The public record does not disclose why the plaintiff accepted this permanent bar.
Permanent claim bar against Sandy SpringSandy Spring Bank exits without filing a single pleading
Sandy Spring Bank achieved complete case closure without incurring the cost and management burden of litigation through the merits phase. Because the bank never filed an answer, no invalidity counterclaims or licensing defenses were placed on record. The bank’s Sheltered Harbor certified infrastructure remains in operation, and no public finding of infringement or non-infringement was made. Fish & Richardson’s early involvement likely contributed to the pre-answer resolution.
No adverse finding — full exitFinancial sector Sheltered Harbor adopters should monitor Digital Doors’ portfolio
Digital Doors holds at least four patents touching Sheltered Harbor certified and compliant data vault architectures — a standard increasingly mandated for U.S. financial institutions. The with-prejudice dismissal resolves only the Sandy Spring dispute. Other banks and fintechs operating Sheltered Harbor infrastructure remain exposed to potential assertion of this portfolio. The absence of any invalidity ruling means the patents emerge from this litigation with their enforceability intact.
Portfolio risk remains for other banksFull party and counsel information
| Role | Name | Type | Detail |
|---|---|---|---|
| Plaintiff | Digital Doors, Inc. | Company | Cybersecurity patent holder — asserting US10250639B2 and three related Sheltered Harbor data vault patentsSearch in Eureka ↗ |
| Defendant | Sandy Spring Bank | Company | Maryland-based community bank operating Sheltered Harbor certified data protection systemsSearch in Eureka ↗ |
| Plaintiff counsel | Joseph J. Zito | Attorney | Counsel for Digital Doors, Inc.Search in Eureka ↗ |
| Plaintiff law firm | Dnl Zito | Law Firm | Representing Digital Doors, Inc.Search in Eureka ↗ |
| Defendant counsel | Neil J. McNabnay | Attorney | Counsel for Sandy Spring BankSearch in Eureka ↗ |
| Defendant counsel | Ryan McKay | Attorney | Counsel for Sandy Spring BankSearch in Eureka ↗ |
| Defendant law firm | Fish & Richardson LLP | Law Firm | Representing Sandy Spring BankSearch in Eureka ↗ |
| Presiding judge | Judge Lydia Kay Griggsby | Judge | Maryland District CourtSearch in Eureka ↗ |
Official order — verbatim text
The dismissal notice expressly invokes Rule 41(a)(1)(A)(i) and confirms the with-prejudice designation, while noting that Sandy Spring Bank had filed neither an answer nor a motion for summary judgment. The phrasing is procedurally precise: it forecloses any argument that the dismissal was inadvertent or tactical. For Sandy Spring, the record is clean — no infringement finding, no invalidity ruling, no cost order. For Digital Doors, the with-prejudice language operates as a self-imposed final bar on these specific claims against this specific defendant, consistent with a negotiated exit rather than unilateral abandonment.
US10250639B2 — Sheltered Harbor certified data vault and cybersecurity systems
The four asserted patents — US10250639B2, US10182073B2, US9734169B2, and US9015301B2 — span application dates from 2007 (US11/746440) through 2015 (US14/597345 and US14/597314), reflecting a patent family built over nearly a decade. The portfolio appears to cover foundational architectures for protecting and recovering financial institution data, directly aligned with the Sheltered Harbor standard developed to ensure banks can restore customer data following a destructive cyberattack.
Sheltered Harbor certification has become an increasingly significant benchmark in U.S. financial services regulation and vendor due diligence. Patents covering its underlying methods carry disproportionate strategic value: any institution that adopts the standard to satisfy regulatory or counterparty expectations may simultaneously be practising the claimed methods. Digital Doors’ portfolio — with claims potentially covering both system and method aspects of certified and compliant implementations — represents meaningful enforcement leverage across a sector-wide adoption curve.
Should your institution run an FTO against US10250639B2 and the Digital Doors portfolio?
Any bank, credit union, fintech, or technology vendor that has implemented or is implementing Sheltered Harbor certified or compliant data vault systems should assess freedom-to-operate against the Digital Doors patent family. The case confirms these patents are being actively asserted and that at least one financial institution resolved the dispute on terms that included a with-prejudice dismissal — before ever testing claim validity in court.
PatSnap Eureka’s FTO Search Agent can map the independent and dependent claims of US10250639B2, US10182073B2, US9734169B2, and US9015301B2 against your specific Sheltered Harbor implementation architecture. Eureka identifies relevant prior art, flags claim elements most likely to read on standard-compliant deployments, and surfaces design-around options — giving your R&D and legal teams a structured basis for risk assessment before any demand letter arrives.
Run a freedom-to-operate analysis on US10250639B2 to assess your product’s exposure
Run FTO in Eureka →Similar cybersecurity patent suits against U.S. financial institutions
Explore related patent infringement cases in the financial cybersecurity space filed in U.S. District Courts, including data vault, resilience, and access control patent disputes.
What this case signals for the financial cybersecurity IP landscape
A four-patent Sheltered Harbor suit ending pre-answer with prejudice raises pointed questions for any financial institution operating certified data vault infrastructure.
Sheltered Harbor compliance may carry hidden patent exposure for banks
Digital Doors’ assertion strategy targets a federally encouraged data resilience standard. Banks that adopted Sheltered Harbor to satisfy regulatory expectations may not have assessed third-party patent risk in the standard’s underlying architecture. Any institution operating certified or compliant systems should treat this case as a trigger for FTO review of the Digital Doors portfolio.
Pre-answer resolution typically signals commercial drivers, not legal weakness
Voluntary dismissal with prejudice before any responsive pleading is filed most commonly reflects a negotiated outcome — whether a license, covenant not to sue, or commercial settlement — rather than an admission of case weakness. The with-prejudice designation distinguishes this from a tactical refile strategy and suggests finality was the plaintiff’s goal.
Digital v Sandy — key questions answered
Digital Doors asserted four U.S. patents: US10250639B2, US10182073B2, US9734169B2, and US9015301B2. All relate to Sheltered Harbor certified and compliant systems and methods for financial data vault protection. The application dates range from 2007 to 2015, suggesting a foundational portfolio in financial cybersecurity resilience architecture.
The public record does not disclose the reason. The dismissal was filed under Rule 41(a)(1)(A)(i) — available because Sandy Spring had not yet answered or moved for summary judgment. The with-prejudice designation permanently bars Digital Doors from refiling the same claims against Sandy Spring. This pattern is commonly associated with a negotiated resolution, license, or covenant not to sue, though no such terms are publicly confirmed.
Sandy Spring Bank exits the litigation with no adverse finding of infringement and no cost or fee award against it. Crucially, Digital Doors is permanently barred from asserting these four patents against Sandy Spring on the same claims under res judicata principles. The bank never filed a responsive pleading, so no invalidity counterclaims or licensing defenses were litigated or recorded.
Yes. A voluntary dismissal with prejudice resolves only the dispute between Digital Doors and Sandy Spring Bank. No court ruled on claim validity, infringement, or enforceability. All four patents — US10250639B2, US10182073B2, US9734169B2, and US9015301B2 — remain in force and may be asserted against other parties operating Sheltered Harbor certified or compliant systems.
Sheltered Harbor is a not-for-profit data resilience standard for U.S. financial institutions, requiring participating banks to maintain a protected, standardised data vault enabling rapid account restoration after a cyberattack. Digital Doors’ patents are alleged to cover the systems and methods underlying certified and compliant implementations of this standard. Because Sheltered Harbor adoption is widespread and encouraged by regulators, patents reading on its architecture carry broad potential enforcement scope across the sector.
PatSnap Eureka searches patents and litigation data to answer instantly.