Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
1,900+
Incidents this year
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (17903 indexed)

high · other · Apr 18, 2022

Sunwing Airlines

Cyberattack caused multi-day flight delays — passenger data and crew scheduling compromised

View incident → Indexed 4 years, 5 months ago
critical · education · Apr 15, 2022

Avvo

4,101,101 records exposed — Email addresses, Passwords

View incident → Indexed 4 years, 5 months ago
high · tech · Apr 15, 2022

GitHub (2022)

OAuth tokens stolen from Heroku and Travis CI integrations

View incident → Indexed 4 years, 5 months ago
high · other · Apr 10, 2022

Oil India Limited

Ransomware attack on state-owned oil company — $7.5M ransom demanded

View incident → Indexed 4 years, 5 months ago
high · government · Apr 8, 2022

Travelio

471,376 records exposed — Auth tokens, Dates of birth, Email addresses, Names and 3 more

View incident → Indexed 4 years, 5 months ago
high · other · Apr 5, 2022

GE Aviation

Former employee stole turbine trade secrets for China

View incident → Indexed 4 years, 5 months ago