The United States District Court for the Western District of Wisconsin has held, in Epic Systems Corp. v. Tata Consultancy Services Limited, that an outside consultant for a company who deceptively posed as a company employee in order to gain greater access to a third-party data system “exceed[ed his] authorized access” to that system within the meaning of the Computer Fraud and Abuse Act (CFAA).   The court also found that the plaintiffs could recover under the CFAA based solely on the costs spent investigating the defendants’ improper access to their computer system.