Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+
Records Exposed
14974
Incidents
94+
Countries
+104%
Breach Velocity YoY
View Live Map → Run Free Exposure Scan RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (14974 indexed)

medium · other · Oct 8, 2023

Turkish Airlines

6,000 employee records exposed through compromised contractor credentials

View incident → Indexed 2 years, 11 months ago
critical · tech · Oct 6, 2023

23andMe

6.9M user genetic ancestry profiles stolen via credential stuffing

View incident → Indexed 2 years, 11 months ago
critical · tech · Oct 6, 2023

23andMe (lawsuit)

6.4M users affected in credential stuffing — company bankrupt by 2025

View incident → Indexed 2 years, 11 months ago
critical · retail · Oct 5, 2023

Hjedd

13,204,029 records exposed — Email addresses, IP addresses, Passwords, Usernames

View incident → Indexed 2 years, 11 months ago
medium · tech · Oct 3, 2023

Activision

16,006 records exposed — Email addresses, Geographic locations, Job titles, Names and 1 more

View incident → Indexed 2 years, 11 months ago
critical · healthcare · Oct 2, 2023

HealthEC

4.5M patient records compromised in business associate breach

View incident → Indexed 2 years, 11 months ago
high · retail · Oct 2, 2023

Horse Isle

27,786 records exposed — Email addresses, Genders, IP addresses, Names and 3 more

View incident → Indexed 2 years, 11 months ago