Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
13072
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (13072 indexed)

high · tech · Jan 11, 2023

Mailchimp

133 customer accounts compromised in social engineering

View incident → Indexed 3 years, 7 months ago
high · finance · Jan 10, 2023

Aflac

100K policyholder records exposed in contractor breach

View incident → Indexed 3 years, 7 months ago
high · retail · Jan 10, 2023

LCBO Web Skimmer Attack

Magecart web skimmer on LCBO checkout pages — customer payment cards compromised for 5 days

View incident → Indexed 3 years, 7 months ago
critical · tech · Jan 10, 2023

Duolingo

2.6M user records scraped via API

View incident → Indexed 3 years, 7 months ago
high · tech · Jan 10, 2023

LG Uplus (Korea)

290,000 customer records stolen — national IDs, IMEI numbers, contact info

View incident → Indexed 3 years, 7 months ago
medium · finance · Jan 7, 2023

DoorDash

367,476 records exposed — Email addresses, Geographic locations, Names, Partial credit card data

View incident → Indexed 3 years, 8 months ago
critical · retail · Jan 7, 2023

SlideTeam

1,464,271 records exposed — Email addresses, Names, Passwords

View incident → Indexed 3 years, 8 months ago
critical · tech · Jan 5, 2023

Twitter (200M)

211,524,284 records exposed — Email addresses, Names, Social media profiles, Usernames

View incident → Indexed 3 years, 8 months ago
medium · tech · Jan 4, 2023

Chick-fil-A

71K customer account records compromised in credential stuffing

View incident → Indexed 3 years, 8 months ago