Nicholas Hall

Counsel in a putative nationwide class action arising from McKesson’s disclosure of unauthorized access to third-party applications and data exfiltration. The complaint alleges that McKesson and CoverMyMeds failed to reasonably safeguard personally identifiable information and protected health information processed through prescription-technology, medication-access, prior-authorization, and pharmacy-management operations.

The action seeks discovery concerning the applications and systems affected, the information exfiltrated, the number and categories of affected people, the adequacy of McKesson’s security controls and notification process, and resulting risks of medical-identity misuse, prescription fraud, phishing, identity theft, financial loss, and other harm.

Counsel in a putative class action concerning Mercor’s artificial-intelligence-driven applicant and worker platform and an alleged supply-chain compromise involving LiteLLM.

The complaint alleges that the platform centralized unusually sensitive applicant and worker information, including recorded AI interviews, facial biometrics, identity-verification documents, background-check files, tax and banking information, payment records, and screenshots captured from personal devices through workforce-monitoring software. The asserted claims include privacy, biometric, consumer-reporting, contract, negligence, and unfair-practices theories.

Counsel in a putative class action alleging that a December 2025 compromise of a Global-e cloud system exposed Ledger customer and order information later used in targeted impersonation and cryptocurrency-theft schemes.

The complaint alleges that customer identity, contact, shipping, purchase, device, and order information could identify an individual as a cryptocurrency holder and make a tailored Ledger impersonation campaign more credible. It proposes claims for affected Ledger customers, targeted victims, and customers who suffered completed digital-asset losses. The named plaintiffs allege aggregate digital-asset losses valued at more than $2.6 million at the time of the transfers.

Counsel in a putative class action arising from a reported November 2025 security incident involving personal information associated with more than 55 million Suno users.

The complaint concerns the alleged exposure of account information and, for certain users, phone numbers, customer names, physical addresses, purchase information, and partial payment-card data maintained in Stripe transaction records. It seeks damages, appropriate notice and protective services, and prospective security relief.

Counsel in a putative class action alleging that Paidwork failed to use reasonable safeguards and provide prompt and adequate notice after sensitive user information was allegedly accessed and publicly disclosed.

The reported dataset was associated with approximately 23.3 million unique email addresses and allegedly included profile, contact, banking, payout, transaction, device, and credential information. The complaint proposes a North American data-breach class and a subclass for users who experienced actual misuse.

Counsel in a putative class action arising from the April 2024 compromise of Stretto’s claims-administration environment and alleged post-breach failures affecting cryptocurrency creditors in the Celsius, Voyager, and Prime Core bankruptcy proceedings.

The complaint alleges that the incident exposed identifying, contact, claim, voting, and distribution information associated with more than 500,000 cryptocurrency creditors. It challenges Stretto’s security controls, breach scoping, notification timing, post-breach communications, claimant-support procedures, and response to delayed or disrupted distributions.

Nick is lead counsel in the Western District of Texas action and counsel in related Southern District of New York litigation arising from Kroll’s August 2023 security incident and its administration of claims and distributions for FTX, BlockFi, and Genesis customer-creditors.

The actions concern alleged exposure of creditor and claims information, targeted cryptocurrency phishing and theft, the use and administration of online claims portals, notice of rights-affecting deadlines, claim-verification delays, distribution impediments, and resulting financial and procedural harm. The litigation seeks damages and practical reforms to protect creditors and improve the administration of claims and distributions following a cybersecurity incident.