Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
14749
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (14749 indexed)

medium · other · Oct 8, 2023

Turkish Airlines

6,000 employee records exposed through compromised contractor credentials

View incident → Indexed 2 years, 11 months ago
critical · tech · Oct 6, 2023

23andMe

6.9M user genetic ancestry profiles stolen via credential stuffing

View incident → Indexed 2 years, 11 months ago
critical · tech · Oct 6, 2023

23andMe (lawsuit)

6.4M users affected in credential stuffing — company bankrupt by 2025

View incident → Indexed 2 years, 11 months ago
critical · retail · Oct 5, 2023

Hjedd

13,204,029 records exposed — Email addresses, IP addresses, Passwords, Usernames

View incident → Indexed 2 years, 11 months ago