Disclosure tracker · updated daily

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

5548
Incidents recorded since Jul 2011
1,900+
Incidents this year
8
Sectors in the index
Sep 29
Last disclosure indexed
View the intelligence map → Check my address RSS
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Law Firm Data Breaches (20523 indexed)

critical · tech · Aug 24, 2022

Plex

15M user accounts including emails and encrypted passwords compromised

View incident → Indexed 4 years, 1 month ago
medium · retail · Aug 24, 2022

Sephora

78K customer records exposed, $1.2M CCPA fine

View incident → Indexed 4 years, 1 month ago
high · finance · Aug 18, 2022

Banorte

2,107,000 records exposed, Account balances, Email addresses, Genders, Government issued IDs and 3 more

View incident → Indexed 4 years, 1 month ago
critical · healthcare · Aug 17, 2022

Novant Health

1.36M patient records shared via Facebook Pixel tracking

View incident → Indexed 4 years, 1 month ago
critical · retail · Aug 17, 2022

SitePoint

1,021,790 records exposed, Bios, Email addresses, IP addresses, Names and 2 more

View incident → Indexed 4 years, 1 month ago
medium · finance · Aug 16, 2022

Shitexpress

23,817 records exposed, Email addresses, IP addresses, Names, Physical addresses and 2 more

View incident → Indexed 4 years, 1 month ago
medium · finance · Aug 15, 2022

Wealthsimple

Social engineering attack targeted employee accounts

View incident → Indexed 4 years, 1 month ago