Law firms hold the most sensitive databaseste data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.
The Information Commissioner (the Commissioner) recently issued a reprimand to ACRO Criminal Records Office for infringements of Articles 32(1), 32(1)(b) and 32(1)(d) of the UK GDPR. ACRO Criminal Records Office (ACRO)
Ransomware breach affecting nearly 170,000 individuals
CRPx0 made the news last month for its somewhat novel approach of offering free OnlyFans accounts to get victims to click links that would deploy its malware. Since August 7, when it launched a leak site on both the cle
Cyber attack exposed data in 2025; compensation claims filed
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that’s exactly what makes this listi
The exfiltrated data may be related to misconfiguration of Microsoft Power Page portals, according to a new report.
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-st
Data breach disclosed in securities filing; type and scope of exposed data not yet determined
Data breach affected approximately 900,000 current and former customers; personal information exposed
24M customer breach due to lack of basic security controls; three major GDPR violations
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. [...]
Data storage platform hacked; 165 breaches affecting over 165 million records total across multiple organizations
Cyberattack exposed personal information of Xfinity customers; resulted in $117.5M settlement
165 orgs compromised, billions of records stolen
2500 orgs and 434K CI/CD pipelines exposed
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
1M+ customer records stolen in ransomware
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement reached
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
Client documents exfiltrated via third-party platform