Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
16170
Incidents
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (16170 indexed)

high · finance · Aug 18, 2022

Banorte

2,107,000 records exposed — Account balances, Email addresses, Genders, Government issued IDs and 3 more

View incident → Indexed 4 years ago
critical · healthcare · Aug 17, 2022

Novant Health

1.36M patient records shared via Facebook Pixel tracking

View incident → Indexed 4 years ago
critical · retail · Aug 17, 2022

SitePoint

1,021,790 records exposed — Bios, Email addresses, IP addresses, Names and 2 more

View incident → Indexed 4 years ago
medium · finance · Aug 16, 2022

Shitexpress

23,817 records exposed — Email addresses, IP addresses, Names, Physical addresses and 2 more

View incident → Indexed 4 years ago
medium · finance · Aug 15, 2022

Wealthsimple

Social engineering attack targeted employee accounts

View incident → Indexed 4 years, 1 month ago
high · tech · Aug 13, 2022

Twitter

6,682,453 records exposed — Bios, Email addresses, Geographic locations, Names and 3 more

View incident → Indexed 4 years, 1 month ago
high · retail · Aug 11, 2022

The North Face

200K customer account records compromised in credential stuffing

View incident → Indexed 4 years, 1 month ago
high · tech · Aug 10, 2022

Cisco (2022)

Yanluowang ransomware accessed employee VPN via compromised Google account

View incident → Indexed 4 years, 1 month ago