Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
11641
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (11641 indexed)

critical · healthcare · May 16, 2024

MediSecure (Australia)

E-prescriptions provider breach — 12.9M Australian patient prescription records stolen

View incident → Indexed 2 years, 3 months ago
high · tech · May 15, 2024

ServiceNow

Misconfigured knowledge bases exposed sensitive data at thousands of orgs

View incident → Indexed 2 years, 3 months ago
critical · tech · May 10, 2024

The Post Millennial

56,973,345 records exposed — Email addresses, Genders, IP addresses, Names and 4 more

View incident → Indexed 2 years, 3 months ago
high · tech · May 9, 2024

Christie's

RansomHub stole 500K client records from auction house

View incident → Indexed 2 years, 3 months ago
medium · government · May 9, 2024

Tappware

94,734 records exposed — Dates of birth, Email addresses, Genders, Government issued IDs and 5 more

View incident → Indexed 2 years, 3 months ago
critical · tech · May 8, 2024

Ascension (tech)

Black Basta ransomware disrupted clinical operations at 140 hospitals

View incident → Indexed 2 years, 3 months ago