Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
13337
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (13337 indexed)

high · tech · Jan 11, 2023

Mailchimp

133 customer accounts compromised in social engineering

View incident → Indexed 3 years, 7 months ago
high · tech · Jan 10, 2023

LG Uplus (Korea)

290,000 customer records stolen — national IDs, IMEI numbers, contact info

View incident → Indexed 3 years, 7 months ago
critical · tech · Jan 10, 2023

Duolingo

2.6M user records scraped via API

View incident → Indexed 3 years, 7 months ago
high · finance · Jan 10, 2023

Aflac

100K policyholder records exposed in contractor breach

View incident → Indexed 3 years, 7 months ago