In Other News
Other noteworthy stories that might have slipped under the radar: Supreme Court hacker sentenced, Lovable exposed user data, Google expands enterprise security. The post In Other News: Unauthorized Mythos Access, Planke
Law Firm Data Breaches (77 indexed)
Silent Ransom Group
Jones Day wasn’t the only big law firm to recently fall prey to threat actors variously known as Silent Ransom Group, Luna Moth, Chatty Spider, or UNC3753. DataBreaches will refer to them as the Silent Ransom Group
LexisNexis Legal & Professional
Customer metadata and business information accessed
View incident → Indexed 1 month ago
Norton Rose Fulbright (Canada)
85K client records from Canadian offices exposed via supply chain compromise
LexisNexis (Government Legal Data)
Federal judges, DOJ attorneys, SEC staff data accessed — 118 .gov accounts compromised
Freshfields Bruckhaus
340K transaction records compromised
VIQ Solutions (Court Transcripts)
Legal transcription vendor breach — sensitive court proceedings compromised via subcontractor
Hogan Lovells International LLP
510K cross-border dispute records exposed via compromised document review platform
Gowling WLG
210K client records compromised via vendor
Baker McKenzie
120K client records from 47 offices worldwide exposed via compromised email gateway
Weil Gotshal & Manges
280K restructuring records stolen
Allen & Overy
290K client records exposed in LockBit ransomware attack
Kirkland & Ellis LLP
Client M&A deal documents and litigation files exposed via compromised document management system
Gibson Dunn & Crutcher LLP
280K antitrust investigation records exposed via phishing attack on senior associates
Baker & Hostetler (Law Firm Sector)
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
Blake Cassels & Graydon
340K client records stolen in ransomware
White & Case
180K client records compromised
Sullivan & Cromwell
210K M&A deal records exposed
Cassels Brock (Canada)
180K client records exposed
Skadden Arps Slate Meagher & Flom
350K M&A deal records exposed via compromised secure file sharing platform
Skadden Arps
210K M&A deal records exposed in targeted attack
Sidley Austin LLP
480K client records from regulatory investigations exposed via ransomware attack
Paul Weiss Rifkind
340K client records compromised
Osler Hoskin & Harcourt
180K M&A deal records exposed