Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
14705
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (14705 indexed)

high · tech · Sep 2, 2022

Samsung

Customer records including names, contacts, DOBs exposed

View incident → Indexed 4 years ago
high · retail · Sep 2, 2022

7-Eleven

Customer mobile app accounts compromised in credential stuffing

View incident → Indexed 4 years ago
critical · tech · Aug 31, 2022

Stripchat

10,001,355 records exposed — Email addresses, IP addresses, Usernames

View incident → Indexed 4 years ago
critical · government · Aug 30, 2022

START

7,455,386 records exposed — Email addresses, Geographic locations, Names, Passwords

View incident → Indexed 4 years ago
critical · tech · Aug 25, 2022

DoorDash

4.9M customer, driver, and merchant records exposed

View incident → Indexed 4 years ago
critical · tech · Aug 25, 2022

LastPass

Encrypted password vaults of 33M users stolen in two-phase breach

View incident → Indexed 4 years ago
critical · other · Aug 25, 2022

TAP Air Portugal

Ragnar Locker published 1.5M customer records — passport and ID data exposed

View incident → Indexed 4 years ago
critical · tech · Aug 24, 2022

Plex

15M user accounts including emails and encrypted passwords compromised

View incident → Indexed 4 years ago
medium · retail · Aug 24, 2022

Sephora

78K customer records exposed, $1.2M CCPA fine

View incident → Indexed 4 years ago