KAREN HANSON RIEBEL
LOCKRIDGE GRINDAL NAUEN PLLP
- Address of record
- 100 SOUTH WASHINGTON AVENUE, SUITE 2200, MINNEAPOLIS, MN 55401, 612-339-6900
- Khriebel@locklaw.com
- Phone
- (612) 339-6900
Contact details as filed with the court in the cases below.
Case history
Publicly tracked matters where this attorney is listed as counsel.
Cencora/The Lash Group Data Security Incident Settlement
On February 27, 2024, Cencora disclosed that its information systems had been improperly accessed by unknown parties. The data breach exposed Personal Information including names, addresses, Social Security numbers, health and insurance information, financial account information, and other sensitive data. Cencora has agreed to pay $40,000,000 and implement enhanced data and information security measures to resolve claims arising from this incident.
- Settlement fund
- $40M
- Claim deadline
- January 19, 2026
- Represents
- ERIN STRICKLAND
Fortra File Transfer Software Data Breach Settlement
Defendants used Fortra's file transfer service, which suffered a criminal cyberattack on or about January 30, 2023. The breach resulted in unauthorized access to approximately five million individuals' personal and health insurance information, including names, addresses, dates of birth, Social Security numbers, and health plan details. Defendants are paying $20 million to resolve claims arising from this data incident.
- Settlement fund
- $20M
- Claim deadline
- August 29, 2025
- Represents
- Branton Underwood
Comcast Data Breach Settlement
In October 2023, a third-party gained unauthorized access to Comcast customers' personal information in a cybersecurity incident. Comcast denies that it engaged in any wrongdoing or violated any law.
- Settlement fund
- $117.5M
- Claim deadline
- September 14, 2026
- Represents
- VINCE ESTEVEZ
MOVEit Customer Data Security Breach Settlement
Cadence Bank used a third-party file transfer application called MOVEit Transfer that had a security vulnerability. This vulnerability led to a data breach between May 28, 2023 and May 31, 2023, where personally identifying information of customers was compromised. Cadence began notifying affected individuals in September 2023.
- Claim deadline
- June 4, 2026
- Represents
- Bruce Bailey, Jian Golestani, Glen Williams
MOVEit Nuance Data Security Breach Settlement
Nuance Communications, Inc. experienced a data security breach between May 27-31, 2023, affecting personally identifiable information of customers. The breach resulted from an alleged vulnerability in MOVEit Transfer, third-party file transfer software that Nuance used in its ordinary business operations. Nuance is settling claims related to this 2023 MOVEit Security Incident, though litigation against Progress Software Corporation (the MOVEit software licensor) continues.
- Claim deadline
- March 30, 2026
- Represents
- Bruce Bailey, Jian Golestani, Glen Williams
Williams v. Duke University Health System Settlement
Duke University Health System allegedly used a tracking tool on its website that may have led to the disclosure of personal or health-related information to a vendor when users visited the website. Duke denies any wrongdoing and the court has not ruled that it did anything wrong.
- Claim deadline
- August 16, 2026
- Represents
- KIM NAUGLE, AFRIKA WILLIAMS
“Recovery” and “exposure” refer to total disclosed settlement funds in associated cases, not money personally won or lost by an attorney. Settlements generally resolve disputed allegations without a finding that either side won. Data comes from public court dockets and may be incomplete.