Cyberattacks on Law Firms Nearly Double as Stolen Documents Hit the Dark Web

Cyberattacks on Law Firms Nearly Double as Stolen Documents Hit the Dark Web

Summary

Greenberg Traurig said an unauthorized actor accessed a limited set of documents and posted them on the dark web, adding to a broader surge in attacks on law firms. Reuters noted BakerHostetler handled nearly 60 law-firm cyber incidents in 2025, almost double 2024. Recent disclosures include breaches or suspicious activity at Taft Stettinius & Hollister, Herbert Smith Freehills Kramer, WilmerHale, Goodwin Procter, and Quinn Emanuel, with exposed data ranging from Social Security numbers to health and client files. Crypto firms have also reported incidents: Coinbase disclosed a 2025 breach tied to bribed support agents that exposed data on 69,461 users; Ledger said a partner breach exposed some order data; SafePal reported a plugin flaw affecting about 39,798 customers; and Trezor said a third-party email breach enabled phishing emails.