Hall Attorneys
All
Active Reviews & Cases

Investigations and Filed Matters

Hall Attorneys reviews data security incidents and privacy events where affected people may have legal claims. These pages summarize the public event, case posture, who may be affected, and what information to preserve before contacting the firm.

Current matters

Reviews and filed actions

Each status below identifies whether Hall Attorneys is evaluating potential claims or counsel in a filed action. Complaints contain allegations only; no findings have been made.

Evaluating claims

DreamHost password resets: security incident investigation

DreamHost expired some email and FTP/SFTP passwords after a service incident. Learn what happened, who needs to act, and how account access is restored.

  • AI-generated investigation; not yet reviewed by an attorney
  • Individual exposure and available claims remain under review
View investigation

Evaluating claims

Warp data breach investigation: agent logs and telemetry

Warp reported a vendor-related incident involving agent logs and telemetry. Read the reported scope, company response, and practical steps for users.

  • AI-generated investigation; not yet reviewed by an attorney
  • Individual exposure and available claims remain under review
View investigation

Evaluating claims

Medical Billing Fraud & Impersonation Investigation

Hall Attorneys is investigating medical billing impersonation, fake payment requests, suspected fraudulent charges, and improper collection of medical debts.

  • Paid a bill that your provider says it never received, or billed for care you did not receive?
  • An ongoing investigation across providers and billing services; a discrepancy alone does not prove fraud
  • Patients, people who paid for a patient, and authorized representatives may request a review
View investigation

Evaluating claims

NVIDIA Brev Data Breach Investigation

Hall Attorneys is investigating reports of unauthorized activity on NVIDIA Brev and possible exposure of SSH keys provisioned for users’ virtual machines.

  • A publicly shared notice excerpt describes activity from October 4 through October 20, 2026
  • Individual exposure, any use of the keys, and the number of affected users remain under review
  • Users, developers, and organizations with related concerns or response costs may request a review
View investigation

Evaluating claims

Community Medical Center (Falls City) Cyberattack Investigation

Hall Attorneys is investigating the October 2026 cyberattack at Community Medical Center in Falls City, Nebraska, and an unverified Qilin data-theft claim.

  • The CEO described a network intrusion and service disruption in an October 19 local news report
  • The hospital’s initial patient-data assessment awaited outside review; the theft claim remains unverified
  • Patients, patient representatives, employees, and others with related concerns may request a review
View investigation

Evaluating claims

Cursor / Claude Code Extension Compromise Investigation

Hall Attorneys is investigating Cursor’s disclosed October 29, 2026 marketplace incident involving a maliciously modified Claude Code extension and potential claims for affected users.

  • Cursor identifies version 2.1.313 and estimates at most 5,000 affected users
  • The page explains the installation window, distribution scope, and official remediation guidance
  • Users with notices, access concerns, or related response costs may request a case review
View investigation

Evaluating claims

Acadian Ambulance Data Breach Investigation

Hall Attorneys is investigating an unverified 600,000-record leak claim naming Acadian Ambulance and its possible connection to the confirmed June 2024 incident.

  • The alleged offering includes Social Security numbers and dates of birth; the claim remains unverified
  • A separate 2026 breach and any connection to the 2024 incident have not been established
  • Patients, patient representatives, employees, and others with related concerns may request a case review
View investigation

Evaluating claims

Binance Hack Investigation

Hall Attorneys is investigating reports of a possible Binance.com hack, including deposits made during the reported October 29, 2026 incident window and any continuing related disruption.

  • Depositors may request a review even if their funds credited successfully or no loss is yet apparent
  • The alleged routing of deposits and exact affected window remain under investigation
  • Account activity, deposit availability, notices, losses, and reimbursement are being reviewed
View investigation

Evaluating claims

Polymarket Front-End Compromise Investigation

Hall Attorneys is investigating Polymarket.com’s October 29, 2026 security incident, reported unauthorized wallet activity, and reimbursement of affected users.

  • Polymarket disclosed a third-party provider compromise affecting its international platform
  • The company marked the incident resolved; individual losses and reimbursement remain under review
  • Affected users may request a case review without connecting a wallet or sharing private keys
View investigation

Evaluating claims

Santiam Hospital & Clinics Data Breach Investigation

Hall Attorneys is investigating an unverified Anubis ransomware claim naming Santiam Hospital & Clinics in Stayton, Oregon. A listing does not establish that a breach occurred.

  • Anubis listing reported; claim remains unverified
  • Affected systems, records, and number of people remain unknown
  • Patients, patient representatives, and employees may request a case review
View investigation

Evaluating claims

Morrison Foerster Data Breach Investigation

Hall Attorneys is investigating an unverified extortion claim naming Morrison & Foerster LLP, also known as MoFo. The report does not establish that a breach occurred.

  • October 28, 2026 social-media report; claim remains unverified
  • Affected systems, records, and number of people remain unknown
  • Clients, employees, and others with related concerns may request a case review
View investigation

Evaluating claims

ICE / DHS Employee Data Leak Investigation

Hall Attorneys is investigating reports of a leak involving more than 41,000 Homeland Security workers, including ICE personnel, and potential privacy claims.

  • Updated October 28, 2026: reported identity, contact, job, and user-group information
  • The claimed access method, Okta’s response, and unresolved questions are explained in the article
  • Employees, contractors, and others with related concerns may request a case review
View investigation

Evaluating claims

PingCAP / TiDB Cloud Data Breach Investigation

Hall Attorneys is investigating PingCAP’s disclosed breach involving internal customer records and support materials connected to TiDB Cloud.

  • Unauthorized access reported from September 9 through October 7, 2026
  • Investigators found no evidence of access to data stored in customer TiDB databases
  • Customers and others with related privacy concerns or response costs may request a review
View investigation

Evaluating claims

University Hospitals & Epic Systems Data Breach Investigation

Hall Attorneys is investigating the October 2026 digital shutdown at University Hospitals in Ohio and potential claims involving Epic Systems and UH MyChart.

  • Unusual activity detected October 22; digital services disconnected as a precaution
  • A data breach, individual exposure, and Epic’s responsibility remain unestablished
  • Patients, patient representatives, and employees may request a case review
View investigation

Lawsuit filed

Quest Diagnostics Data Breach Class Action

Hall Attorneys and co-counsel filed a putative class action against Quest Diagnostics over unauthorized access to Quanum LSM patient records.

  • Filed October 23, 2026 · District of New Jersey · No. 2:26-cv-13837
  • Proposed Nationwide Class and Colorado Subclass; no class has been certified
  • Specific affected data and the number of people involved remained under review at filing
View case

Evaluating claims

Linebarger Data Breach Investigation

Hall Attorneys is investigating an unverified Everest extortion claim naming Linebarger Goggan Blair & Sampson LLP. The listing does not establish that a breach occurred.

  • October 22, 2026 listing; claim remains unverified
  • Affected records, systems, and number of people remain unknown
  • People with collection accounts, employees, and clients may request a review
View investigation

Evaluating claims

Railway Data Breach Investigation

Hall Attorneys is investigating Railway’s October 21, 2026 security disclosure concerning customer environment variables and credentials.

  • Railway reports possible access to encrypted variables and some decrypted secrets
  • Affected-account scope remains under review; all users advised to rotate credentials
  • Seeking information about unauthorized usage, response costs, and related losses
View investigation

Evaluating claims

Porter Hedges Data Breach Investigation

Hall Attorneys is investigating an unverified extortion claim naming Porter Hedges LLP. The public listing does not establish that a breach occurred.

  • October 21, 2026 Leakeddata listing; claim remains unverified
  • Affected records, systems, and number of people remain unknown
  • Clients, employees, and others with related concerns may request a review
View investigation

Evaluating claims

Central Ohio Primary Care Data Breach Investigation

Hall Attorneys is investigating the Central Ohio Primary Care data breach and potential claims on behalf of affected patients and employees.

  • COPC reports approximately 1.4 million people impacted
  • Potential exposure of identity, financial, and limited patient health information
  • Patients and employees may request a case review
View investigation

Evaluating claims

Behavioral Wellness Center at Girard Data Breach Investigation

Hall Attorneys is investigating reports of a possible cybersecurity incident involving North Philadelphia Health System and the Behavioral Wellness Center at Girard.

  • October 7, 2026 ransomware listing; unauthorized access or data theft remains unconfirmed
  • Seeking information from current or former patients and employees
  • Initial inquiries should not include medical history or sensitive records
View investigation

Evaluating claims

MoneyGram Data Breach Investigation

Hall Attorneys is investigating October 2026 reports of a possible MoneyGram cybersecurity incident and whether personal or financial information was exposed.

  • October 11, 2026 ransomware listing does not independently establish a breach
  • Any connection to MoneyGram’s disclosed 2024 incident remains unestablished
  • Senders, recipients, and employees may request a case review
View investigation

Evaluating claims

Claude ClickFix & Fake Installer Investigation

Hall Attorneys is investigating potential claims involving fake Claude downloads reached through search advertisements and redirects.

  • Reviewing deceptive installation prompts and resulting harm
  • Seeking advertising records, security findings, and documented costs or losses
  • Separate from the firm's frontier AI safety investigation
View investigation

Evaluating claims

Ledger / CryptoBilis Cryptocurrency Loss Investigation

Hall Attorneys is investigating reported cryptocurrency losses involving Ledger devices purchased from CryptoBilis following Ledger's October 9, 2026 warning.

  • Ledger asked the reseller to pause device sales and shipments
  • Warning addresses purchases in the prior 90 days; cause and total losses remain unconfirmed
  • Separate from the existing Ledger / Global-e data incident class action
View investigation

Evaluating claims

Frontline Education Data Breach Investigation

Hall Attorneys is investigating the Frontline Education breach reported October 2, 2026, involving school district employee information.

  • Social Security numbers, email addresses, and physical addresses reportedly exposed
  • Total affected-person and district counts remain undisclosed
  • Seeking individual notices and records of related harm
View investigation

Evaluating claims

Anthropic & Frontier AI Safety Investigation

Hall Attorneys is investigating unauthorized actions by AI agents from Anthropic and other frontier developers. We want to hear from people and businesses whose data or systems may have been affected.

  • Covers Anthropic and other frontier AI developers
  • Reviewing unauthorized access, data exposure, and losses
  • Seeking security notices, activity logs, and related records
View investigation

Evaluating claims

ASUS eShop Data Breach Investigation

Hall Attorneys is reviewing the ASUS eShop customer notice reported September 23, 2026. ASUS says contact details and order records may have been accessed through part of its online store.

  • ASUS says financial information was not involved
  • Customer count, affected regions, and incident dates are not disclosed in the reviewed notice
  • Customers warned about convincing order-related phishing messages and calls
View investigation

Evaluating claims

CenterPoint Energy Data Breach Investigation

Hall Attorneys is reviewing a September 12, 2026 report of an alleged CenterPoint Energy customer-data leak. The source attributes the claims to a threat actor and says they remain unverified.

  • More than 7.49 million records claimed, not a confirmed count of people
  • Utility-account, billing, contact, and partial identity information allegedly involved
  • Authenticity, claimed API access, and affected scope have not been independently verified
View investigation

Evaluating claims

Trezor Data Breach Investigation

Hall Attorneys is reviewing Trezor's September 9 email-provider breach warning and the earlier ShipMonk order-data exposure. A connection between the events has not been established.

  • September 9 statement identifies the STM32 security-alert email as phishing
  • Email-provider incident scope and affected-person count remain undisclosed
  • Earlier ShipMonk disclosure added approximately 67,000 U.S. customers
View investigation

Lawsuit filed

McKesson Data Breach Class Action

Hall Attorneys and co-counsel filed a putative nationwide class action against McKesson and CoverMyMeds after McKesson confirmed unauthorized access to third-party applications and data exfiltration.

  • Hall v. McKesson Corporation et al., No. 3:26-cv-02958-D (N.D. Tex.)
  • Filed August 31, 2026 against McKesson Corporation and CoverMyMeds LLC
  • A service connection does not prove that your information was involved
View case

Evaluating claims

Nexus / IDScan.net Data Breach Investigation

Hall Attorneys is investigating reports that an illicit service called Nexus offered more than 153 million driver's-license records allegedly connected to IDScan.net.

  • 153 million-plus driver's-license records claimed, not a verified count of distinct people
  • Government-ID images, authentication captures, timestamps, and other identity-document records reportedly involved
  • IDScan.net said it was investigating but had not confirmed the reported source or scope
View investigation

Evaluating claims

Houston City College Data Breach Investigation

Hall Attorneys is evaluating potential claims after a reported June 2026 Houston City College breach involving current students, alumni, and 831,642 indexed email addresses.

  • 831,642 unique email addresses listed by Have I Been Pwned
  • Academic records, citizenship status, birth dates, contact information, and profile data reportedly involved
  • The public sources reviewed do not yet establish an individualized notice process
View investigation

Evaluating claims

Glendale Community College Data Breach Investigation

Hall Attorneys is evaluating potential claims after Glendale Community College said student educational records may have been copied without authorization.

  • 793,925 unique email addresses listed by Have I Been Pwned
  • GCC lists Social Security, driver's-license, passport, financial-aid, or health information among potentially affected data
  • GCC offered potentially affected people complimentary monitoring and identity protection
View investigation

Evaluating claims

University of Nottingham Data Breach Investigation

Hall Attorneys is evaluating potential claims for current students and alumni after a June 2026 breach of the University of Nottingham student record system.

  • 454,635 unique email addresses listed by Have I Been Pwned
  • Passport, disability, ethnicity, academic, payment, identity, and contact information reportedly involved
  • The university reported the incident to Action Fraud and the UK Information Commissioner's Office
View investigation

Evaluating claims

JCPenney Data Breach Investigation

Hall Attorneys is evaluating potential claims for current and former workers after a reported Oracle PeopleSoft breach involving JCPenney and associated-brand HR records.

  • 368,418 unique email addresses listed by Have I Been Pwned
  • Social Security numbers, birth dates, job titles, contact information, usernames, and other IDs reportedly involved
  • A separate putative class action was filed by other counsel on June 17, 2026
View investigation

Evaluating claims

Nissan Employee Data Breach Investigation

Hall Attorneys is evaluating potential claims for current and former Nissan employees after a 2026 Oracle PeopleSoft incident involving sensitive personnel records.

  • Affected-person count remains unconfirmed
  • Contact, banking, government-identifier, financial, tax, dependent, and beneficiary data may be involved
  • Nissan identified current and former employees in the U.S., Canada, Mexico, and Brazil
View investigation

Evaluating claims

Illinois Central College Data Breach Investigation

Hall Attorneys is evaluating reports that Illinois Central College student, employee, payroll, financial-aid, and banking records were obtained in a June 2026 extortion campaign.

  • Affected-person count and detailed individual scope remain unconfirmed
  • Threat actor claimed more than 28 GB across more than 122,000 files
  • Reported records include student, employee, payroll, banking, financial-aid, and grade information
View investigation

Monitoring findings

NAIC Security Incident Investigation

Hall Attorneys is reviewing the June 2026 NAIC PeopleSoft incident while reflecting NAIC's current finding that policyholder and employee personal data were not accessed.

  • No affected consumer cohort is established
  • Public statutory reports, rating determinations, and routine technical information were accessed
  • NAIC says policyholder, producer, employee-personal, EFT, and event-payment information were not accessed
View investigation

Evaluating claims

Moody Bible Institute Data Breach Investigation

Hall Attorneys is evaluating potential claims after a June 2026 Moody Bible Institute breach involving more than 2.3 million reported accounts.

  • 2,303,416 affected accounts listed by Have I Been Pwned
  • Names, birth dates, contact information, addresses, genders, and marital statuses reportedly involved
  • Moody says it patched the software vulnerability and offered one year of Kroll monitoring
View investigation

Evaluating claims

Beckett Collectibles Data Breach Investigation

Hall Attorneys is evaluating potential claims for current and former Beckett users after a reported November 2025 breach involving more than 1 million accounts.

  • 1,041,238 affected accounts listed by Have I Been Pwned
  • Names, usernames, email addresses, phone numbers, and physical addresses reportedly involved
  • Stolen data was reportedly offered for sale and later released publicly
View investigation

Lawsuit filed

Suno Data Breach Class Action

Nicholas Hall of Hall Attorneys serves as court-appointed Interim Co-Lead Class Counsel in the consolidated litigation over Suno’s reported November 2025 data breach.

  • In re Suno Data Breach Litigation, No. 1:26-cv-13400-ADB (D. Mass.)
  • Interim co-lead appointment entered October 26, 2026
  • 55.3 million unique email addresses reported
  • Nationwide Class and California Subclass proposed in the complaint
View case

Evaluating claims

One Medical / Iora Health Data Security Investigation

Hall Attorneys is evaluating potential claims for One Medical Seniors and legacy Iora Health patients or authorized caregivers affected by the June 2026 archived file storage incident.

  • Third-party archived Iora Health file storage system
  • One Medical Seniors and legacy Iora patient records
  • Health, insurance, billing, identifier, or contact information concerns
View investigation