Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+

Records Exposed

13070

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

Law Firm Data Breaches (13070 indexed)

medium · government · May 10, 2023

79K federal employee retirement records exposed

79K federal employee retirement records exposed

View incident → Indexed 3 years, 3 months ago

medium · government · May 10, 2023

79K federal employee retirement records exposed

79K federal employee retirement records exposed

View incident → Indexed 3 years, 3 months ago

medium · tech · May 9, 2023

TechnologyOne (Australia)

Unauthorized third party accessed Australian enterprise software company's systems

View incident → Indexed 3 years, 3 months ago

medium · education · May 8, 2023

City Colleges of Chicago

38K student records exposed in data breach

View incident → Indexed 3 years, 3 months ago

medium · government · May 8, 2023

City of Greenville SC

22K records exposed in data breach

View incident → Indexed 3 years, 3 months ago

medium · retail · May 8, 2023

Nordstrom Rack

76K employee records exposed in vendor breach

View incident → Indexed 3 years, 3 months ago

critical · finance · May 8, 2023

Bank Syariah Indonesia (BSI)

LockBit stole 1.5TB from Indonesia's largest Islamic bank — customer data published

View incident → Indexed 3 years, 3 months ago

high · other · May 7, 2023

ABB Ltd (Switzerland)

Black Basta ransomware disrupted operations at Swiss-Swedish engineering giant

View incident → Indexed 3 years, 4 months ago

medium · education · May 5, 2023

Cranston Public Schools (RI)

6K student records exposed

View incident → Indexed 3 years, 4 months ago

high · healthcare · May 4, 2023

Chattanooga Heart Institute

170K patient records exposed

View incident → Indexed 3 years, 4 months ago

critical · government · May 3, 2023

Dallas TX city government

Royal ransomware encrypted 800+ city servers, disrupted 911 and courts

View incident → Indexed 3 years, 4 months ago

medium · government · May 3, 2023

City of Jackson TN

18K records exposed in data breach

View incident → Indexed 3 years, 4 months ago

critical · healthcare · May 3, 2023

ASL 1 Abruzzo (Italy)

Monti ransomware stole 522GB of patient data from Italian health authority

View incident → Indexed 3 years, 4 months ago

high · tech · May 1, 2023

Amazon

Employee data exposed through MOVEit breach; approximately 2.8 million lines of employee data compromised.

View incident → Original disclosure Indexed 3 years, 4 months ago

critical · tech · May 1, 2023

Multiple MOVEit customers

Zero-day vulnerability in Progress Software MOVEit exploited by Cl0p ransomware; thousands of organizations affected

View incident → Original disclosure Indexed 3 years, 4 months ago

critical · tech · May 1, 2023

Progress Software (MOVEit)

Zero-day vulnerability in MOVEit Transfer exploited in late May 2023, affecting thousands of organizations across multiple sectors

View incident → Original disclosure Indexed 3 years, 4 months ago

medium · finance · May 1, 2023

Crum & Forster Insurance

90K policyholder records exposed

View incident → Indexed 3 years, 4 months ago

critical · tech · May 1, 2023

Progress Software MOVEit

MOVEit Transfer vulnerability exploited by Cl0p ransomware gang, affecting thousands of organizations globally. Multiple data theft incidents reported through 2024.

View incident → Original disclosure Indexed 3 years, 4 months ago

medium · education · Apr 30, 2023

Bluefield University

23K records leaked by Avos ransomware

View incident → Indexed 3 years, 4 months ago

critical · legal · Apr 28, 2023

HWL Ebsworth (Law Firm)

ALPHV/BlackCat stole 4TB from top-tier Australian law firm — client legal data published

View incident → Indexed 3 years, 4 months ago

high · legal · Apr 28, 2023

HWL Ebsworth

65K client and case files stolen in ALPHV/BlackCat ransomware

View incident → Indexed 3 years, 4 months ago

high · retail · Apr 27, 2023

CityJerks

177,554 records exposed — Bios, Dates of birth, Email addresses, Geographic locations and 6 more

View incident → Indexed 3 years, 4 months ago

high · government · Apr 24, 2023

Chinese state-sponsored actors

Chinese state-sponsored actors targeted Canadian parliament and diaspora communities

View incident → Indexed 3 years, 4 months ago

high · government · Apr 24, 2023

Chinese state-sponsored actors

Chinese state-sponsored actors targeted Canadian parliament and diaspora communities

View incident → Indexed 3 years, 4 months ago