Goodwin Procter LLP Hit by Third Data Breach in Five Years Goodwin Procter LLP, a prominent global law firm, confirmed a data security breach in spring 2024, marking its third cybersecurity incident since 2021. The breach was disclosed to Law360 Pulse, though specific details about the scope, affected data, or attackers remain undisclosed. This latest incident follows two prior breaches in 2021 and 2023, raising concerns about the firm’s cybersecurity resilience. Goodwin Procter, which serves high-profile clients across industries, has not publicly addressed the root causes or remediation efforts tied to these repeated attacks. The breach underscores the growing cyber threats targeting legal firms, which often handle sensitive corporate, financial, and personal data. As law firms increasingly become prime targets for ransomware and data exfiltration, the incident highlights the need for heightened security measures in the legal sector. No further updates on the investigation or impact have been released.

The data of Goodwin Procter was stolen by hackers through a third-party vendor that they use for large file transfers. The hackers had unauthorized access to a small portion of their client's confidential data. The law firm took the help of forensics experts to investigate the attack.