DocketWise Data Breach Exposes Sensitive Information of Over 116,000 Individuals In October 2025, DocketWise a cloud-based immigration case management platform for law firms discovered that unauthorized actors had accessed credentials for one of its third-party partner repositories. The breach involved the cloning of repositories used in a data migration pipeline, exposing unstructured data belonging to DocketWise’s law firm clients and their customers. An investigation confirmed that the compromised data included highly sensitive personally identifiable information (PII) such as names, Social Security numbers, dates of birth, driver’s license and passport numbers, financial account details, payment card information, medical records, and login credentials. In total, 116,666 individuals across the U.S. were affected, including 13 in Maine. DocketWise began notifying impacted law firms and individuals on April 3, 2026, following a detailed review of the exposed data. The incident has prompted legal action, with class action law firm Shamis & Gentile P.A. investigating potential compensation claims for those affected. DocketWise, founded in 2015 by immigration attorneys in Philadelphia, provides case management, document handling, and client communication tools for legal professionals. The breach underscores the risks of third-party data exposure in cloud-based legal software.

DocketWise Data Breach Exposes Sensitive Immigration Client Data In October 2025, DocketWise a software platform used by U.S. immigration professionals detected unauthorized access to credentials linked to a partner-managed repository. According to an April 3, 2026, filing with the Maine Attorney General, an investigation revealed that an unauthorized individual used valid credentials to access and copy repositories tied to DocketWise’s data migration, exposing unstructured law firm client data. The compromised information includes highly sensitive details such as names, addresses, Social Security numbers, birth dates, driver’s license and passport numbers, financial account and payment card data, government IDs, tax IDs, health insurance policy numbers, medical treatment records, and account usernames with access credentials. DocketWise serves immigration attorneys, meaning the breach likely impacted individuals involved in legal immigration processes. The law firm Edelson Lechtzin LLP has launched a class action investigation into potential legal remedies for affected individuals, though no lawsuit has been filed at this time. The incident underscores the risks of third-party credential misuse in data security breaches.