Live disclosure tracker · updated continuously

Law Firm Data Breaches

Law firms hold the most sensitive corporate data outside the client itself — M&A, IP, litigation, settlements. They are systematically targeted by both criminal and state actors. Below is every law-firm breach LeakTrace has indexed.

98B+

Records Exposed

12270

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

Law Firm Data Breaches (12270 indexed)

critical · tech · Jul 9, 2026

Charter Communications Spectrum

40M customer records stolen via vishing attack

View incident → Indexed 1 month, 3 weeks ago

critical · finance · Jul 9, 2026

Aflac Life Insurance Japan

4.38M customer records stolen including bank details

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

London Hydro

170K customer account and billing records accessed

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

HSIN platform

HSIN platform breached, national security data exposed

View incident → Indexed 1 month, 3 weeks ago

medium · legal · Jul 9, 2026

Chisholm Persson Ball

Akira ransomware hit US law firm

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Illinois Dept Human Services

Hundreds of thousands of health records exposed publicly

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

KDDI Japan Telecom

14.2M email credentials exposed across six ISPs

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Eurail

300K traveler passports and IBANs exposed

View incident → Indexed 1 month, 3 weeks ago

high · tech · Jul 9, 2026

Crunchbase

2M business records exfiltrated by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

KDDI Six ISPs

14.2M email logins exposed via third-party flaw

View incident → Indexed 1 month, 3 weeks ago

high · tech · Jul 9, 2026

Klue

OAuth tokens and Salesforce CRM data accessed

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

24B credential records from 36 breach sources exposed

24B credential records from 36 breach sources exposed

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

DHS Homeland Security

HSIN government info-sharing platform breached

View incident → Indexed 1 month, 3 weeks ago

critical · finance · Jul 9, 2026

700Credit Automotive

5.8M consumer records stolen via API compromise

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Cybernews Credential Dump

24B stolen credential records publicly exposed

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Intel-sharing platform

Intel-sharing platform breached during live World Cup ops

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Air Creebec Canada

70GB data stolen from Canadian regional airline

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals

Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals were involved in the cyberattack on telecom provider Odido that exposed the personal data of more than 6 million customers earlier th

View incident → Original disclosure Indexed 1 month, 3 weeks ago

medium · tech · Jul 9, 2026

A cloud intrusion that ended with the deployment of cryptomining malware has exposed a

A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a single,

View incident → Original disclosure Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

A foreign, financially motivated group was responsible for a cyberattack on state-owned

A foreign, financially motivated group was responsible for a cyberattack on state-owned forestry company Latvijas Valsts Mezi (LVM), officials said.

View incident → Original disclosure Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

HSIN network

HSIN network breached, security plans exposed

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Texas Parks and Wildlife

3M hunting and fishing license records exposed

View incident → Indexed 1 month, 3 weeks ago

medium · education · Jul 9, 2026

Oxford University CareerConnect

Student PII exposed via career platform breach

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Intel-sharing platform HSIN

Intel-sharing platform HSIN breached for weeks

View incident → Indexed 1 month, 3 weeks ago