Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
10649
Incidents
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (10649 indexed)

critical · finance · Feb 26, 2026

Odido

6,077,025 records exposed — Bank account numbers, Customer service records, Dates of birth, Driver's licenses and 7 more

View incident → Original disclosure Indexed 6 months ago
critical · retail · Feb 22, 2026

CarGurus

12,461,887 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more

View incident → Indexed 6 months, 1 week ago
medium · retail · Feb 20, 2026

CarMax

431,371 records exposed — Email addresses, Names, Phone numbers, Physical addresses

View incident → Indexed 6 months, 1 week ago
high · finance · Feb 18, 2026

Figure

967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more

View incident → Indexed 6 months, 1 week ago
high · finance · Feb 17, 2026

Canada Goose

581,877 records exposed — Device information, Email addresses, IP addresses, Names and 4 more

View incident → Indexed 6 months, 1 week ago
medium · tech · Feb 16, 2026

APOIA.se

450,764 records exposed — Email addresses, Names, Physical addresses

View incident → Indexed 6 months, 1 week ago