Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
13071
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (13071 indexed)

critical · healthcare · Feb 1, 2023

GoodRx

1.5M user prescription data shared with Facebook via tracking pixel

View incident → Indexed 3 years, 7 months ago
critical · healthcare · Feb 1, 2023

GoodRx (FTC fine)

$1.5M FTC fine for sharing health data — 1.5M users affected

View incident → Indexed 3 years, 7 months ago
medium · retail · Feb 1, 2023

Grubhub

74K user records exposed in contractor account compromise

View incident → Indexed 3 years, 7 months ago
high · finance · Jan 31, 2023

ION Trading UK

LockBit ransomware disrupted derivatives trading — City of London firms impacted

View incident → Indexed 3 years, 7 months ago
high · retail · Jan 31, 2023

Planet Ice

240,488 records exposed — Dates of birth, Email addresses, Genders, IP addresses and 5 more

View incident → Indexed 3 years, 7 months ago
critical · retail · Jan 30, 2023

JD Sports (UK)

10M customer records exposed — names, addresses, emails, phone numbers, order details

View incident → Indexed 3 years, 7 months ago
high · finance · Jan 29, 2023

Hatch Bank

140K customer records exposed in Fortra GoAnywhere breach

View incident → Indexed 3 years, 7 months ago