Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+

Records Exposed

11945

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

Law Firm Data Breaches (11945 indexed)

high · other · Jul 9, 2026

Eastman Kodak

2.2M customer records stolen by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Charter Communications Spectrum

40M customer records stolen via vishing attack

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Conduent

62.2M records exposed including SSNs and medical data

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Threat intel platform

Threat intel platform breached during World Cup ops

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

DHS Homeland Security Network

Sensitive gov intel-sharing platform breached

View incident → Indexed 1 month, 3 weeks ago

critical · finance · Jul 9, 2026

Aflac Life Insurance Japan

4.38M customer records stolen including bank details

View incident → Indexed 1 month, 3 weeks ago

critical · healthcare · Jul 9, 2026

DentaQuest

2.6M Medicaid health records leaked by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · finance · Jul 9, 2026

700Credit Automotive

5.8M consumer records stolen via API compromise

View incident → Indexed 1 month, 3 weeks ago

high · tech · Jul 9, 2026

Crunchbase

2M business records exfiltrated by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

KDDI Japan Telecom

14.2M email credentials exposed across six ISPs

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Intel-sharing network HSIN

Intel-sharing network HSIN breached for weeks

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

24B credential records from 36 breach sources exposed

24B credential records from 36 breach sources exposed

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Credential Dump Global

24B stolen credentials exposed in public database

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Acworth City Government

Government systems hit by INC_RANSOM ransomware

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals

Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals were involved in the cyberattack on telecom provider Odido that exposed the personal data of more than 6 million customers earlier th

View incident → Original disclosure Indexed 1 month, 3 weeks ago

medium · tech · Jul 9, 2026

A cloud intrusion that ended with the deployment of cryptomining malware has exposed a

A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a single,

View incident → Original disclosure Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

A foreign, financially motivated group was responsible for a cyberattack on state-owned

A foreign, financially motivated group was responsible for a cyberattack on state-owned forestry company Latvijas Valsts Mezi (LVM), officials said.

View incident → Original disclosure Indexed 1 month, 3 weeks ago

medium · legal · Jul 9, 2026

Chisholm Persson Ball

Akira ransomware hit US law firm

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Air Creebec Canada

70GB data stolen from Canadian regional airline

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Illinois Dept Human Services

Hundreds of thousands of health records exposed publicly

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Intel-sharing platform HSIN

Intel-sharing platform HSIN breached for weeks

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Cybernews Credential Dump

24B stolen credential records publicly exposed

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

London Hydro

170K customer account and billing records accessed

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Nissan Americas

Employee SSNs, banking, tax data stolen

View incident → Indexed 1 month, 3 weeks ago