Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
9972
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (9972 indexed)

medium · other · Aug 7, 2026

PortSwigger

PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors

View incident → Original disclosure Indexed 2 weeks, 5 days ago
high · tech · Aug 7, 2026

Progress LoadMaster

Progress LoadMaster Command Injection Vulnerability — Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by e

View incident → Original disclosure Indexed 2 weeks, 5 days ago
high · healthcare · Aug 6, 2026

ERMI LLC

74K records with SSNs and medical data exposed

View incident → Indexed 2 weeks, 6 days ago
medium · healthcare · Aug 6, 2026

ERMI

74K records exposed SSNs and medical data

View incident → Indexed 2 weeks, 6 days ago