Two Major U.S. Law Firms Hit by Data Breaches in Latest Cybersecurity Incidents Two prominent U.S. law firms Quinn Emanuel Urquhart & Sullivan LLP and McDermott Will & Emery LLP have recently confirmed data breaches, adding to a growing trend of cyberattacks targeting legal organizations. The incidents reflect the escalating cybersecurity risks faced by law firms, which often handle sensitive client data and intellectual property. While specific details about the breaches including the exact timing, attack vectors, and extent of compromised data remain undisclosed, the incidents underscore the persistent threat of cyber intrusions in the legal sector. Law firms are frequent targets due to the high-value information they store, ranging from corporate secrets to litigation strategies. The breaches follow a pattern of similar attacks on legal entities, reinforcing concerns about the industry’s vulnerability to ransomware, phishing, and other cyber threats. As law firms increasingly adopt digital tools and remote work, the potential for exploitation by malicious actors continues to rise. No further public statements on mitigation efforts or regulatory responses have been released as of September 3, 2024. The incidents serve as a reminder of the ongoing need for robust cybersecurity measures in the legal profession.

The California Office of the Attorney General reported a data breach at Quinn Emanuel Urquhart & Sullivan, LLP, involving unauthorized access to data between May 13, 2022, and May 14, 2022. The breach potentially affected an unknown number of individuals. The incident was reported on July 21, 2023, and a notification letter was made available detailing the incident and response actions. The breach involved unauthorized access to data, which could have compromised sensitive information, although the exact nature and extent of the data compromised were not specified.