Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
10294
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (10294 indexed)

critical · government · Jul 11, 2026

Daryna Antoniuk

Daryna Antoniuk reports: Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals were involved in the cyberattack on telecom provider Odido that exposed the personal data of more than 6 mil

View incident → Original disclosure Indexed 1 month, 2 weeks ago
critical · legal · Jul 11, 2026

Brandon Richards

Brandon Richards reports: California resident Sean Mortazi filed a class action lawsuit against TikTok Inc. on June 11, 2026, alleging a data breach exposed the personal data of more than 2.4 billion users worldwide. The

View incident → Original disclosure Indexed 1 month, 2 weeks ago
critical · other · Jul 10, 2026

In Other News

Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO. The post In Other News: DHS Database Hacked, Ad

View incident → Original disclosure Indexed 1 month, 2 weeks ago
medium · other · Jul 10, 2026

CISA

CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository

View incident → Original disclosure Indexed 1 month, 2 weeks ago
high · tech · Jul 10, 2026

Balbooa Forms

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload w

View incident → Original disclosure Indexed 1 month, 2 weeks ago
high · tech · Jul 10, 2026

iCagenda iCagenda

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment

View incident → Original disclosure Indexed 1 month, 2 weeks ago