Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive databaseste data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
9705
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (9705 indexed)

critical · healthcare · Aug 11, 2026

Alcon Pharma

25M Salesforce PII records stolen by ShinyHunters

View incident → Indexed 2 weeks, 1 day ago
critical · healthcare · Aug 11, 2026

MCBS

Medical business management company data breach exposed personal information of 1.2 million individuals

View incident → Original disclosure Indexed 2 weeks, 1 day ago
high · tech · Aug 11, 2026

Metabase Metabase

Metabase SQL Injection Vulnerability — Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them ad

View incident → Original disclosure Indexed 2 weeks, 1 day ago