Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.
On July 1, 2025, Radiology Associates of Richmond (“RAR”) reported a breach to HHS that had occurred in April 2024 and affected more than 1.4 million patients. By the end of July 2025, the well-known radiolo
Other noteworthy stories that might have slipped under the radar: Supreme Court hacker sentenced, Lovable exposed user data, Google expands enterprise security. The post In Other News: Unauthorized Mythos Access, Planke
Jones Day wasn’t the only big law firm to recently fall prey to threat actors variously known as Silent Ransom Group, Luna Moth, Chatty Spider, or UNC3753. DataBreaches will refer to them as the Silent Ransom Group
Customer metadata and business information accessed
85K client records from Canadian offices exposed via supply chain compromise
Federal judges, DOJ attorneys, SEC staff data accessed — 118 .gov accounts compromised
340K transaction records compromised
Legal transcription vendor breach — sensitive court proceedings compromised via subcontractor
510K cross-border dispute records exposed via compromised document review platform
210K client records compromised via vendor
120K client records from 47 offices worldwide exposed via compromised email gateway
290K client records exposed in LockBit ransomware attack
280K restructuring records stolen
Client M&A deal documents and litigation files exposed via compromised document management system
280K antitrust investigation records exposed via phishing attack on senior associates
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
340K client records stolen in ransomware
180K client records compromised
210K M&A deal records exposed
180K client records exposed
350K M&A deal records exposed via compromised secure file sharing platform
210K M&A deal records exposed in targeted attack
480K client records from regulatory investigations exposed via ransomware attack
340K client records compromised