International law firm Greenberg Traurig disclosed that an unauthorized actor accessed documents and posted them on the dark web. The breach is part of a widening pattern of cyberattacks targeting law firms.
According to BakerHostetler, a cybersecurity firm, law firm breaches nearly doubled in 2025. The firm handled nearly 60 incidents involving law firms in 2025, compared to approximately 30 in 2024.
Several major law firms have disclosed breaches in recent months. In March 2026, Taft Stettinius & Hollister detected unusual activity that exposed client Social Security numbers. In May, London-based Herbert Smith Freehills Kramer reported unauthorized access to Social Security numbers, government identification numbers, and health records. The same month, WilmerHale faced a proposed class action lawsuit following an alleged breach. Goodwin Procter disclosed an incident on August 7, and Quinn Emanuel reported an August 14 social-engineering attack that compromised one account and exposed stored files.
Phishing accounts for 30% of security incidents across industries, according to BakerHostetler's 2026 Data Security Incident Response Report, which analyzed more than 1,250 incidents in 2025.
Cryptocurrency Companies Also Targeted
Crypto companies have experienced similar breaches involving customer personal information. In May 2025, Coinbase disclosed that criminals bribed overseas support agents to steal personal data from 69,461 users, including names, addresses, phone numbers, and government-ID images. Coinbase said no funds, passwords, or private keys were compromised.
In January 2026, Ledger confirmed that a breach at e-commerce partner Global-e exposed order data belonging to some Ledger.com customers. The unauthorized access affected customers who made purchases on Ledger.com using Global-e as a merchant of record.
In August, SafePal disclosed that an order-tracking plug-in flaw exposed personal information for approximately 39,798 customers, including names, emails, shipping addresses, phone numbers, and purchase details. The company stated that wallet credentials and payment information were unaffected and that the flaw had been fixed.
Also in August, Trezor reported that hackers breached its third-party email provider and sent phishing emails falsely claiming a hardware flaw threatened users' recovery phrases. Trezor took down the malicious domain and investigated the breach.
