Data Breach

Data breaches on the internet and at point-of-sale terminals are an increasing concern for consumers and businesses. 

Data breaches can result in the loss of payment card data, as well as personally identifiable information.  This can result in financial loss, identity theft, and privacy concerns.

Gustafson Gluek represents consumers and financial institutions in class actions seeking compensation, changes to data practices, and other relief for injured parties under federal and state law.

The following are select cases Gustafson Gluek is currently investigating, litigating, or has recently litigated on behalf of plaintiffs raising data breach concerns.

  • Gustafson Gluek represents a proposed class of individuals whose sensitive personally identifiable genetic and health information was accessed by unauthorized persons.  This case is in its early stages and has recently been consolidated in the Northern District of California.

  • Gustafson Gluek represents a proposed class of approximately 1.4 million Allianz Life customers and employees whose sensitive personal information was compromised in a July 2025 data breach. Cyber-criminals accessed a customer relationship management system (CRM) connected to Allianz Life’s systems, exposing their customers highly sensitive personal information.

  • Gustafson Gluek represents a proposed class of 73 million current and former AT&T customers whose sensitive Personally Identifiable Information was accessed by unauthorized third parties. 

  • Dan Gustafson has been appointed Overall Lead Counsel in one of the largest healthcare data breaches in US history. Gustafson Gluek represents a proposed class of over 190 million individuals who had their Personally Identifiable Information accessed by unauthorized parties. That information was stored and controlled by Change Healthcare, Inc., a subsidiary of UnitedHealth Group that specializes in payment management services in the healthcare industry. Gustafson Gluek also represents a proposed class of thousands of healthcare providers that were damaged by the data breach and resulting ransomware attack that shut down a repayment system that processes 15 billion transactions annually.  

  • David Goodwin of Gustafson Gluek has been named as Interim Class Counsel in a case where hundreds of thousands of individuals had their Personal Identification Information and Protected Health Information impermissibly accessed by hackers. This case has recently settled in principle.

  • Gustafson Gluek serves on the Interim Executive Committee in this matter, where over 800,000 individuals had their sensitive personal information such as billing information, Social Security numbers, patient identifiers, and more, stolen by cyber-criminals.

  • David Goodwin has been appointed Interim Class Counsel in a case involving a data breach affecting hundreds of thousands of people who had their Personally Identifiable Information and Protected Health Information leaked by online hackers.

  • Gustafson Gluek serves as counsel representing a proposed class of individuals who had their Personally Identifiable Information tracked on North Memorial’s website and shared with Meta/Facebook for impermissible marketing purposes in contravention of US Department of Health and Human Services guidelines.

  • Gustafson Gluek serves as counsel representing a proposed class of individuals who had their Personally Identifiable Information tracked on North Memorial’s website and shared with Meta/Facebook for impermissible marketing purposes in contravention of US Department of Health and Human Services guidelines.

  • Gustafson Gluek has been appointed interim co-lead counsel in a case alleging that individuals had their Personally Identifiable Information accessed by unauthorized third parties. That information was controlled by Defendant Brady Martz & Associates, PC, which is a firm offering accounting, tax, and audit services. The information in question includes financial account numbers, debit/credit card numbers, security codes, passwords, and PINs.

  • Gustafson Gluek represents a proposed class of millions of consumers whose financial records and information were accessed by unauthorized third parties. This case has reached a proposed settlement valued at $15 million plus injunctive relief.

  • Gustafson Gluek was appointed Lead Counsel to represent plaintiffs in a class action against the University of Minnesota for a data breach alleging the University was negligent in the collection, storage, and security of the Personal Identification Information it collected from thousands of students and employees.  Plaintiffs are individuals whose Personal Identification Information was subject to the breach.

  • Gustafson Gluek represents a proposed class of over 60 million people who had their children’s Personally Identifiable Information accessed by malignant actors when a breach occurred in a network that specializes in student data collection, storage, and analytics.