Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability — Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to a
Android Framework Integer Overflow Vulnerability — Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
Linux Kernel Improper Authentication Vulnerability — Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
Ransomware cyberattack exposed thousands of patient records
Customer records allegedly breached; threat actor claimed responsibility on underground forums
24 billion records including usernames, passwords, and URLs exposed from infostealer malware
Cyberattack exposed hospital records of nearly 13,000 patients in New Jersey
2025 ransomware attack leaked protected health data on 1.3 million people to dark web
Thousands of NHS patient records stolen in ransomware cyberattack on Essex healthcare provider
Threat actor claimed 5.5 million records exposed including customer, employee, and corporate data
Sydney-based travel agency customer records allegedly breached, details posted on underground forums
Data breach exposed 4.38 million customers in June 2026, second major hack within 14 months
Cyberattack exposed hospital patient records of nearly 13,000 patients
Employee-related records exposed in data breach
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
Publicly exposed database leaked 24 billion stolen credentials in one of the largest infostealer compilations
Cybersecurity loophole exposed 1 million social security numbers in mapping service
Healthcare billing company; 1.26M patients exposed; PEAR ransomware attack
42 million customer records exposed after ShinyHunters extortion threat
Breach exposed SSNs and medical records
Hundreds of thousands of records and celebrity contact information exposed in data leak
FortiBleed campaign exposed valid administrative and VPN credentials for 73,932 FortiGate systems
135K contact records including police and government contacts leaked on dark web
FortiBleed campaign exposed verified administrator credentials for 73,932 Fortinet FortiGate firewall devices