Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+

Records Exposed

11965

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

Law Firm Data Breaches (11965 indexed)

critical · finance · Jul 9, 2026

700Credit Automotive

5.8M consumer records stolen via API compromise

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Oracle PeopleSoft Clients

100+ orgs hit via zero-day CVE-2026-35273

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Canada House of Commons

Employee PII stolen via SharePoint zero-day

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Global Infostealer Credential Dump

24B stolen credentials exposed online

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Conduent Business Services

62.2M records exposed in ransomware attack

View incident → Indexed 1 month, 3 weeks ago

high · healthcare · Jul 9, 2026

One Medical Amazon

Archived senior care records breached via third-party storage

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Nissan Americas

Employee SSNs, banking, tax data stolen

View incident → Indexed 1 month, 3 weeks ago

critical · healthcare · Jul 9, 2026

AdaptHealth Corp

Patient PHI and billing credentials stolen via contractor

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Intel-sharing platform

Intel-sharing platform breached during live World Cup ops

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Eurail Interrail

300K traveler passports and IBANs exposed

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Credential Dump Global

24B stolen credentials exposed in public database

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

24B Credential Megadump

24B stolen credentials exposed from 36 sources

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Air Creebec Canada

70GB data stolen from Canadian regional airline

View incident → Indexed 1 month, 3 weeks ago

high · healthcare · Jul 9, 2026

Lake Region Healthcare

SSNs, biometrics and medical records confirmed stolen

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Acworth City Government

Government systems hit by INC_RANSOM ransomware

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

French Tchap Platform

73K government accounts and 643K messages stolen

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

HSIN security planning network

HSIN security planning network breached

View incident → Indexed 1 month, 3 weeks ago

high · finance · Jul 9, 2026

Liberty Mutual Insurance

108GB policyholder and financial records exfiltrated

View incident → Indexed 1 month, 3 weeks ago

critical · healthcare · Jul 9, 2026

NYC Health and Hospitals

1.8M records stolen including biometrics

View incident → Indexed 1 month, 3 weeks ago

high · finance · Jul 9, 2026

NAIC Insurance Commissioners

Regulatory filings and credentials stolen by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Conduent Government Services

62.2M SSNs and health records exposed

View incident → Indexed 1 month, 3 weeks ago

high · tech · Jul 9, 2026

Crunchbase

2M business records exfiltrated by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Tchap French Government

73K government accounts and 643K messages stolen

View incident → Indexed 1 month, 3 weeks ago

medium · other · Jul 9, 2026

A new data-extortion group called Helix is using identity-focused tactics such as voice

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. [.

View incident → Original disclosure Indexed 1 month, 3 weeks ago