Data Breach & Data Privacy Litigation 

Protection When Your Privacy is Violated

In today’s digital world, nearly every institution that touches your life collects and stores your personal information. Virtually any institution that does substantial business with consumers holds your financial information. Hospitals, medical practices, health insurance companies and their vendors maintain your medical history, test results, and prescriptions. Employers, schools, and government agencies manage extensive digital files that include Social Security numbers, tax information, and your relationship to your spouse, children, and extended family members. Most of this information is stored online, often in massive databases or third-party cloud systems that are connected, shared, and sometimes even sold across industries.

Companies that unlawfully protect their systems or unlawfully sell your information violate the law. This is how we help: 

Data Breaches: Networked and cloud storage might be convenient for companies, but they create a real vulnerability for individuals. A single weak link like a misconfigured server, outdated firewall, or negligent employee may enable an attack by cybercriminals, which can expose millions of private records. Health and financial data are especially valuable to hackers, who can use your data to commit identity theft, to obtain loans and other financial gain, file false tax returns, obtain medical care in your name, or sell your data on the dark web, to be used by others who may also commit identity theft. 

Data Privacy: Consumers have rights to privacy even in today's digital world. When corporations and data brokers collect, trade, and profit from your personal information,  they may be doing it in violation of the laws that protect your privacy rights.

We help people whose personal information was stolen by, or  given to an unauthorized third-party in violation of the law. We hold corporations and institutions accountable for failing to safeguard sensitive consumer data and fight for compensation for the financial losses, stress, and uncertainty these breaches cause.

What we do:

• Data breach litigation — For individuals whose sensitive data was exposed through cyberattacks or corporate failures.

• Unauthorized data sharing — When companies sell or share private information without consent.

• Consumer privacy class actions — For groups of people affected by widespread data breaches or online privacy violations.

Our goal is simple: to protect your digital privacy and make sure those responsible are held legally and financially accountable.

Who We Represent

We advocate for individuals, families, and employees harmed by data breaches involving:

• Health care providers and insurers

• Retailers, e-commerce, and subscription platforms

• Employers and payroll processors

• Educational institutions and government contractors

If you’ve received a data breach notification, or otherwise suspect that your personal or health information has been exposed or misused, you may have legal options to recover damages.

Why Choose Bailey Glasser

• Plaintiff-Focused: We fight for consumers and individuals—not corporations.

• National Reach: We handle data breach and privacy cases in courts across the United States.

• Experienced Team: Our lawyers have led major national privacy and cybersecurity class actions, recovering millions of dollars on their behalf and holding companies accountable.

• No Recovery, No Fee: We represent most clients on a contingency basis.

Data privacy violations are not abstract—they affect real people, families, and futures. We bring experience, precision, and persistence to every case we take.

FAQ: How Companies Profit from Your Data

Q1: How do companies collect personal data?

Companies collect data every time you go online, use an app, make a purchase, or sign up for a service. They track what you click, where you go, what you buy, and how long you stay on a page. This information -- called consumer data -- is stored, analyzed, and often shared with advertisers or data brokers.

Q2: What kinds of information do they gather?

Businesses collect details like your name, contact information, browsing history, purchase records, device data, and even location or health information. When combined, this creates a detailed personal profile that can reveal far more than most people realize about their habits, interests, and identity.

Q3: Who buys, sells, or Steals my data?

Networks of data brokers, advertisers, and analytics firms trades this information every day. They buy and sell consumer data to predict behavior, target ads, or influence decisions. The market for personal data in the U.S. alone is worth billions of dollars and continues to grow with little oversight.

In addition, cybercriminals who steal information can hold data for ransom, release it to the dark web, and create chaos across the lives across innocent individuals.  

Q4: Why is this a legal issue?

When a company collects data, it also has a legal duty to protect it. Failing to safeguard that information—through weak cybersecurity or unauthorized sharing—can violate privacy laws and expose consumers to fraud, identity theft, and other serious harm. Data breach litigation helps hold those companies accountable.

Q5: What can I do if my data has been exposed?

If you received a data breach notice, you may have legal rights. A data privacy lawyer can help you understand whether your information was mishandled and what compensation may be available. Our firm represents plaintiffs nationwide in data breach and privacy cases, ensuring companies face consequences for putting consumer information at risk.

       

Related Practices

Learn More About Our Successes +

Key Contacts

Our Team

Experience

Our data breach and privacy cases include: 

• • We represent patients who sued a hospital in Massachusetts for improperly sharing our clients' individually identifiable health information with Google, including information related to appointments, medication, and health-related information. 
  • We represent individuals and a class of patient visitors against Excela Health in a lawsuit in Pennsylvania where we allege that Excela improperly shared our clients' individually identifiable health information—specifically, personal website searches made on Excela’s website—with Facebook through an undisclosed pixel embedded on Excela’s website. 
  • We are co-lead counsel in a lawsuit against DaVita, Inc. which suffered a data breach and had information stolen by a ransomware group and published patient data on the dark web which impacted over 2.7 million individuals. 
  • We represent a class of union members whose union, the Pennsylvania State Education Association, did not disclose a data breach that exposed the personal and medical information of approximately 500,000 members. 
  • We served as co-lead counsel for a class of nearly 3 million pediatric patients and their guardians whose personal data was exposed in a data breach by Connexin, Inc., doing business as Office Practicum. This was one of the largest data breaches at that time and one of the largest ever involving primarily children.
  • In Salazar v. National Basketball Association, we briefed and argued a critical appeal concerning the Video Privacy Protection Act. Michael Salazar alleged the NBA violated the VPPA, and users' privacy, by using a tracking pixel to gather and share identifying information and video-watching activities with Meta, Facebook's parent company.
  • In Salazar v. Paramount Global, No. 23-5748 (6th Cir.), we argued another critical appeal concerning the Video Privacy Protection Act. This time, Michael Salazar alleged Paramount’s 247Sports.com violated the VPPA by tracking and sharing users' data, including video-watching histories, with Meta.

   

News & Insights