The Vermont Office of the Attorney General reported a data breach involving Riley Pope & Laney, LLC on February 12, 2025. The breach involved unauthorized access to the network from August 11 to August 12, 2024, potentially affecting individuals' names and additional unspecified information. The number of affected individuals is currently unknown.

The South Carolina-based law firm Riley Pope & Laney LLC faced a 2024 data breach exposing the personal information of over 7,000 individuals, including clients and potentially employees. The breach stemmed from alleged negligence in safeguarding sensitive data, leading to unauthorized exposure. The lead plaintiff, Jason Warren, initially filed a proposed class-action lawsuit but later voluntarily dismissed the claims after mediation discussions. While the exact nature of the compromised data (e.g., financial records, Social Security numbers, or legal documents) was not specified, the incident highlights significant reputational and legal risks for the firm. The breach did not involve ransomware or a targeted cyber attack but rather a failure in data protection protocols, raising concerns about the firm’s cybersecurity posture and potential regulatory scrutiny under data privacy laws. Clients may face heightened risks of identity theft, fraud, or phishing attacks due to the exposed information.