Data Breach

Data breaches on the internet and at point-of-sale terminals are an increasing concern for consumers and businesses alike. 

Data breaches can result in the loss of payment card data, as well as personally identifiable information.  This can result in financial loss, identity theft, and privacy concerns.

Gustafson Gluek represents consumers and financial institutions in class actions seeking compensation, changes to data practices, and other relief for injured parties under federal and state law.

The following are select cases Gustafson Gluek is currently investigating, litigating or has recently litigated on behalf of plaintiffs raising data breach concerns.

  • Gustafson Gluek represents a proposed class of individuals whose sensitive personally identifiable genetic and health information was accessed by unauthorized persons.  This case is in its early stages and has recently been consolidated in the Northern District of California.

  • Gustafson Gluek represents a proposed class of 73 million current and former AT&T customers whose sensitive personally identifiable information was accessed by unauthorized third parties. 

  • Gustafson Gluek serves on the Interim Executive Committee in this matter, where over 800,000 individuals had their sensitive personal information such as billing information, Social Security numbers, patient identifiers, and more were stolen by cyber criminals.

  • Gustafson Gluek represents a proposed class of millions of individuals who had their Personally Identifiable Information (“PII”) accessed by unauthorized parties. That information was stored and controlled by Change Healthcare, Inc., a subsidiary of UnitedHealth Group that specializes in payment management services in the healthcare industry.

  • Gustafson Gluek serves as counsel representing a proposed class of individuals who had their personally identifiable information (“PII”) tracked on North Memorial’s website and shared with Meta/Facebook for impermissible marketing purposes in contravention to US Department of Health and Human Services guidelines.

  • Gustafson Gluek serves as counsel representing a proposed class of individuals who had their personally identifiable information (“PII”) tracked on North Memorial’s website and shared with Meta/Facebook for impermissible marketing purposes in contravention to US Department of Health and Human Services guidelines.

  • Gustafson Gluek has been appointed interim co-lead counsel in a case alleging that individuals had their personally identifiable information (“PII”) accessed by unauthorized third parties. That information was controlled by Defendant Brady Martz & Associates, PC, which is a firm offering accounting, tax, and audit services. The information in question includes financial account numbers, debit/credit card numbers, security codes, passwords, and PINs.

  • Gustafson Gluek represents a proposed class of millions of consumers whose financial records and information were accessed by unauthorized third parties. This case has reached a proposed settlement valued at $15 million plus injunctive relief.

  • Gustafson Gluek was appointed Lead Counsel to represent plaintiffs in a class action against the University of Minnesota for a data breach alleging the University was negligent in the collection, storage, and security of the Personal Identification Information it collected from thousands of students and employees.  Plaintiffs are individuals whose Personal Identification Information was subject to the breach.  Motions to Dismiss are being briefed and trial is currently scheduled for 2025.