GARY F. LYNCH
Lynch Carpenter, LLP
- Address of record
- 1133 Penn Avenue, 5th Floor, Pittsburgh, PA 15222, 412-322-9243
- gary@lcllp.com
- Phone
- (412) 322-9243
- Fax
- Fax 412-231-0246
Contact details as filed with the court in the cases below.
Case history
Publicly tracked matters where this attorney is listed as counsel.
Anne Arundel Privacy Settlement
Anne Arundel Dermatology, P.A. experienced a data security incident between February 14, 2025, and May 13, 2025, that potentially affected customers' personal information, including PII and PHI. The defendant denies all wrongdoing and entered into this settlement to avoid litigation costs.
- Settlement fund
- $2.4M
- Claim deadline
- July 8, 2026
- Represents
- Annette Butler
Cencora/The Lash Group Data Security Incident Settlement
On February 27, 2024, Cencora disclosed that its information systems had been improperly accessed by unknown parties. The data breach exposed Personal Information including names, addresses, Social Security numbers, health and insurance information, financial account information, and other sensitive data. Cencora has agreed to pay $40,000,000 and implement enhanced data and information security measures to resolve claims arising from this incident.
- Settlement fund
- $40M
- Claim deadline
- January 19, 2026
- Represents
- CLARENCE JOHNSON, MICHAEL WILLIAMS, FRANCIS SAYERS, JOHN HOLLIS, AMANDA TUCKER, LISA BLEDSOE, ERIN STRICKLAND
Geisinger Health Data Security Incident Settlement
An unauthorized individual gained access to personally identifiable information and personal health information of Geisinger Health patients in a data incident that occurred on or about November 29, 2023. The lawsuit asserts claims against Geisinger Health and Nuance Communications, Inc. related to this data breach.
- Claim deadline
- March 18, 2026
- Represents
- Robert Schulte, Jr., Mark Dushok, Christina Izquierdo, Eric O'Brien
Fortra File Transfer Software Data Breach Settlement
Defendants used Fortra's file transfer service, which suffered a criminal cyberattack on or about January 30, 2023. The breach resulted in unauthorized access to approximately five million individuals' personal and health insurance information, including names, addresses, dates of birth, Social Security numbers, and health plan details. Defendants are paying $20 million to resolve claims arising from this data incident.
- Settlement fund
- $20M
- Claim deadline
- August 29, 2025
- Represents
- Jessica Guerrero, Michael Sezawich, Kristi Mcdavitt, Timothy Ferguson
Comcast Data Breach Settlement
In October 2023, a third-party gained unauthorized access to Comcast customers' personal information in a cybersecurity incident. Comcast denies that it engaged in any wrongdoing or violated any law.
- Settlement fund
- $117.5M
- Claim deadline
- September 14, 2026
- Represents
- KENNETH HASSON, David McCauley, Jodi Wolfson, ROBERT M. ROSEMAN, JACLYN REMARK, NOAH BIRKETT, RYAN EMMETT, CHARLES METZGER, PATRICIA ANDROS, MICHELLE BIRNIE, H. JOSHUA DIAMOND, JESSICA DURHAM, ROBERT P. ELSON, VINCE ESTEVEZ, CHAROLET W. FAIL, CENTORIA GUNTHER, DANIELLE HENDRICKSON, JACQUELINE KEUNG, ALYSSIA NANEZ, STEVEN PRESCOTT, RONALD SIMMONT, ROBERT SMITH, VERONICA VERDIER, LAURA WILEY, LAUREN WILKINSON, LORI ZINN, RALF WERNER, SHANDRELLE HARPER, DANIEL FRANK
MOVEit Customer Data Security Breach Settlement
Cadence Bank used a third-party file transfer application called MOVEit Transfer that had a security vulnerability. This vulnerability led to a data breach between May 28, 2023 and May 31, 2023, where personally identifying information of customers was compromised. Cadence began notifying affected individuals in September 2023.
- Claim deadline
- June 4, 2026
- Represents
- Kelly Harris, Jack Moore, Patsie Eslinger, Frederick Smith, Kevan Seidner, Amber Salcedo, Michael Evangelista
MOVEit Nuance Data Security Breach Settlement
Nuance Communications, Inc. experienced a data security breach between May 27-31, 2023, affecting personally identifiable information of customers. The breach resulted from an alleged vulnerability in MOVEit Transfer, third-party file transfer software that Nuance used in its ordinary business operations. Nuance is settling claims related to this 2023 MOVEit Security Incident, though litigation against Progress Software Corporation (the MOVEit software licensor) continues.
- Claim deadline
- March 30, 2026
- Represents
- Kelly Harris, Jack Moore, Patsie Eslinger, Frederick Smith, Kevan Seidner, Amber Salcedo, Michael Evangelista
HCA Healthcare Data Breach Settlement
HCA Healthcare announced a data security incident on or about July 10, 2023, in which personal information of current HCA patients was compromised. HCA denies any wrongdoing.
- Claim deadline
- September 25, 2025
- Represents
- Kelsey Hinds
PharMerica Data Breach Settlement
PharMerica experienced a data incident that exposed personal information of individuals in the United States. The class is seeking settlement for the resulting harm from this data breach. PharMerica denies any wrongdoing.
- Settlement fund
- $5.3M
- Claim deadline
- April 27, 2026
- Represents
- Jaketrius Lurry
NextGen Healthcare Data Breach Settlement
NextGen Healthcare announced a data breach on April 28, 2023 that exposed settlement class members' private information. The company is settling the class action lawsuit without admitting wrongdoing, and has agreed to pay $19,375,000 to compensate affected individuals and provide identity defense services.
- Settlement fund
- $19.4M
- Claim deadline
- March 30, 2026
- Represents
- Jessica Emery
TMX Data Security Settlement
TMX Finance Corporate Services, Inc. and TMX Finance LLC experienced a data security breach that accessed, stole, impacted, or compromised customers' personal information. TMX is settling claims related to this data breach without admitting wrongdoing.
- Claim deadline
- August 6, 2025
- Represents
- Tommy Domino
Independent Living Systems Data Breach Settlement
Independent Living Systems LLC experienced a data security incident in June/July 2022 in which an unauthorized third party may have gained access to files containing sensitive personal information, including names, Social Security numbers, tax identification numbers, medical information, and health insurance information. ILS denies any wrongdoing or liability.
- Claim deadline
- November 4, 2025
- Represents
- David Perez
Shields Data Incident Settlement
Shields Health Care Group suffered a cyberattack on its computer network between March 7 and March 21, 2022, in which certain files containing patients' private information may have been accessed. Shields denies the claims but agreed to settle to avoid litigation costs and risks.
- Claim deadline
- December 3, 2025
- Represents
- Tennie Komar
T-Mobile 2021 Data Breach Settlement
T-Mobile suffered a cyber-attack in August 2021 that exposed the personal information of more than 76 million customers. The stolen data included full names, dates of birth, Social Security numbers, and driver's license information of current, former, and prospective customers.
- Settlement fund
- $350M
- Claim deadline
- January 23, 2023
- Represents
- Randall Norris, Misty Norris, Sheila Hamilton-Bynum, Richard Halpern, Thalessa Billups, Quintin Humphrey, Elyse Tamara, James Gabriel, Paola Dooly, William Harris, Ryan Philpot
Flagstar Data Breach Settlement
Flagstar Bank suffered two data breaches in January 2021 and December 2021 that exposed the personal information of approximately 2.2 million individuals. The bank is paying to settle claims related to these breaches, though Flagstar denies wrongdoing and admits no liability.
- Settlement fund
- $31.5M
- Claim deadline
- August 11, 2026
- Represents
- Rafael Hernandez, Scott Myers
“Recovery” and “exposure” refer to total disclosed settlement funds in associated cases, not money personally won or lost by an attorney. Settlements generally resolve disputed allegations without a finding that either side won. Data comes from public court dockets and may be incomplete.