Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
1,900+
Incidents this year
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (17903 indexed)

high · tech · Mar 31, 2022

Royal Enfield

420,873 records exposed — Dates of birth, Email addresses, Genders, Names and 5 more

View incident → Indexed 4 years, 5 months ago
critical · healthcare · Mar 25, 2022

MCG Health

1.1M patient records exposed including SSNs

View incident → Indexed 4 years, 5 months ago
high · tech · Mar 22, 2022

Okta (2022)

LAPSUS$ breached via third-party vendor Sitel, 366 customer tenants affected

View incident → Indexed 4 years, 5 months ago
high · government · Mar 21, 2022

Greek Posts (ELTA)

Vice Society ransomware disrupted Greek postal service — all branches offline

View incident → Indexed 4 years, 5 months ago
high · tech · Mar 19, 2022

ZAP-Hosting

746,682 records exposed — Browser user agent details, Chat logs, Email addresses, IP addresses and 4 more

View incident → Indexed 4 years, 6 months ago
critical · finance · Mar 18, 2022

TransUnion

3M consumer credit records exposed in South Africa breach

View incident → Indexed 4 years, 6 months ago
medium · other · Mar 17, 2022

P&O Ferries (UK)

Employee data compromised following mass redundancy — HR systems breached

View incident → Indexed 4 years, 6 months ago