Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
1,900+
Incidents this year
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (19573 indexed)

high · tech · May 13, 2021

Rapid7

Codecov incident led to unauthorized access of source code

View incident → Indexed 5 years, 4 months ago
critical · tech · May 13, 2021

WedMeGood

1,306,723 records exposed — Email addresses, Genders, Names, Passwords and 2 more

View incident → Indexed 5 years, 4 months ago
critical · retail · May 10, 2021

DriveSure

3,675,099 records exposed — Email addresses, Names, Passwords, Phone numbers and 2 more

View incident → Indexed 5 years, 4 months ago
critical · government · May 7, 2021

Colonial Pipeline

DarkSide ransomware shut down largest US fuel pipeline for 6 days

View incident → Indexed 5 years, 4 months ago
high · government · May 6, 2021

City of Tulsa OK

Conti ransomware attacked city systems, police citations leaked

View incident → Indexed 5 years, 4 months ago
high · other · May 1, 2021

Brenntag

DarkSide ransomware targeted chemical distributor, $4.4M ransom paid

View incident → Indexed 5 years, 4 months ago
critical · retail · Apr 30, 2021

ParkMobile

20,949,825 records exposed — Email addresses, Licence plates, Names, Passwords and 1 more

View incident → Indexed 5 years, 4 months ago
critical · finance · Apr 28, 2021

Descomplica

4,845,378 records exposed — Email addresses, Names, Partial credit card data, Passwords and 1 more

View incident → Indexed 5 years, 4 months ago
critical · retail · Apr 27, 2021

Jefit

9,052,457 records exposed — Email addresses, IP addresses, Passwords, Usernames

View incident → Indexed 5 years, 4 months ago
critical · retail · Apr 26, 2021

bigbasket

24,500,011 records exposed — Dates of birth, Email addresses, IP addresses, Names and 3 more

View incident → Indexed 5 years, 5 months ago
critical · retail · Apr 25, 2021

MangaDex

2,987,329 records exposed — Email addresses, IP addresses, Passwords, Usernames

View incident → Indexed 5 years, 5 months ago
critical · retail · Apr 25, 2021

ShopBack

20,529,819 records exposed — Email addresses, Geographic locations, Names, Passwords and 1 more

View incident → Indexed 5 years, 5 months ago
critical · healthcare · Apr 24, 2021

Smile Brands

2.59M patient records exposed in ransomware attack

View incident → Indexed 5 years, 5 months ago