Cyberattacks on Law Firms Nearly Double as Stolen Documents Hit the Dark Web

In brief

• Greenberg Traurig said an unauthorized actor accessed documents and posted them on the dark web.
• The firm notified affected clients; a Vermont notice identified exposed Social Security information.
• Other law firms have disclosed breaches involving personal data, with WilmerHale and Eckert Seamans facing lawsuits.

International law firm Greenberg Traurig said an unauthorized actor accessed a limited number of documents and posted them on the dark web, Reuters reported on Thursday.

The report is part of a growing trend of data breaches targeting law firms. According to Reuters, the law firm of BakerHostetler handled nearly 60 cybersecurity incidents involving law firms in 2025, almost double its 2024 caseload.

In a report published earlier this year, BakerHostetler’s 2026 Data Security Incident Response Report draws on more than 1,250 incidents across industries in 2025, with phishing accounting for 30% of incidents.

According to Reuters, other law firms have disclosed data breaches, including an incident in March 2026, when Taft Stettinius & Hollister detected unusual activity on one system that exposed client Social Security numbers.

In May, the London-based law firm Herbert Smith Freehills Kramer said unauthorized access exposed Social Security numbers, government identification numbers, and health records. A separate alleged May breach at WilmerHale prompted a proposed class action.