Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
12230
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (12230 indexed)

medium · other · Oct 8, 2023

Turkish Airlines

6,000 employee records exposed through compromised contractor credentials

View incident → Indexed 2 years, 10 months ago
critical · tech · Oct 6, 2023

23andMe (lawsuit)

6.4M users affected in credential stuffing — company bankrupt by 2025

View incident → Indexed 2 years, 10 months ago
critical · tech · Oct 6, 2023

23andMe

6.9M user genetic ancestry profiles stolen via credential stuffing

View incident → Indexed 2 years, 10 months ago
critical · retail · Oct 5, 2023

Hjedd

13,204,029 records exposed — Email addresses, IP addresses, Passwords, Usernames

View incident → Indexed 2 years, 10 months ago
medium · tech · Oct 3, 2023

Activision

16,006 records exposed — Email addresses, Geographic locations, Job titles, Names and 1 more

View incident → Indexed 2 years, 11 months ago
critical · healthcare · Oct 2, 2023

HealthEC

4.5M patient records compromised in business associate breach

View incident → Indexed 2 years, 11 months ago
high · retail · Oct 2, 2023

Horse Isle

27,786 records exposed — Email addresses, Genders, IP addresses, Names and 3 more

View incident → Indexed 2 years, 11 months ago