Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
12270
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (12270 indexed)

critical · government · Sep 14, 2023

MalindoAir

4,328,232 records exposed — Dates of birth, Email addresses, Genders, Loyalty program details and 6 more

View incident → Indexed 2 years, 11 months ago
high · tech · Sep 13, 2023

Retool

27 crypto customers compromised via Google Authenticator sync phishing

View incident → Indexed 2 years, 11 months ago
high · other · Sep 12, 2023

Airbus (France)

Contractor credentials compromised — employee data stolen through Turkish Airlines supplier

View incident → Indexed 2 years, 11 months ago
critical · tech · Sep 11, 2023

MGM Resorts

Scattered Spider attack caused $100M+ losses, 10 days of disruption

View incident → Indexed 2 years, 11 months ago
high · finance · Sep 11, 2023

Viva Air

932,232 records exposed — Email addresses, IP addresses, Names, Partial credit card data and 3 more

View incident → Indexed 2 years, 11 months ago