Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion grou
1M member bank and personal data breached
2M government records leaked
North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.
1.8M patient records and biometrics exposed
Data breach affecting hundreds of thousands of Washington customers, notification law violations
Threat actor claims 5.5 million records exposed, customer and employee data for sale
Ransomware attack on US health network provider
Tax, court and payment systems taken offline
Significant volume stolen from US hospital billing systems
350K patient SSNs and payment records stolen from AWS
Police and government contact data published on dark web
Student and faculty data exfiltrated via ransomware
4.38M policyholders and bank accounts stolen
Canadian subsidiary network access confirmed
INC_RANSOM ransomware attack on Canadian college
Government systems compromised in cyberattack
195-200 firms breached via legacy credential
Client SSNs and PII exposed in intrusion
100TB stolen including payment transaction records
24B stolen credential records exposed publicly