Victory Disability Suffers Data Breach Exposing Sensitive Client Information Victory Disability, a Pennsylvania-based law firm specializing in Social Security and VA disability claims, recently disclosed a data breach affecting current and former clients nationwide. The incident, detected in November 2025, involved unauthorized access to systems containing personally identifiable information (PII) and protected health information (PHI). Between October 27 and November 12, 2025, an unknown party accessed portions of the firm’s network, potentially viewing or exfiltrating sensitive data. Exposed information includes names, contact details, government-issued IDs, Social Security numbers, dates of birth, health insurance details, and medical records. Victory Disability launched an investigation with third-party cybersecurity experts and notified federal law enforcement and the Vermont and California Attorney Generals’ offices on December 12, 2025. The firm has since secured its systems and is monitoring the dark web for signs of leaked data. To mitigate risks, affected individuals are being offered 24 months of complimentary credit monitoring and identity protection services. A dedicated call center (877-332-1724) has been established for inquiries. The full scope of the breach, including the number of impacted clients, remains undisclosed.