Law Firm Cybersecurity

WilmerHale faced a proposed class action lawsuit filed this week in U.S. District Court for the District of Columbia over a May 8, 2026 data incident in which a firm employee disclosed sensitive client information to an unauthorized third party who had misrepresented their identity. The breach exposed names and Social Security numbers of thousands of clients. Nevada resident Jason Perry filed the suit, styled Perry v. Wilmer Cutler Pickering Hale & Dorr LLP, No. 1:26-cv-02470, seeking negligence and contract damages on behalf of affected clients.

Blank Rome LLP, a Philadelphia-based national law firm, faces a proposed class action lawsuit alleging it failed to protect sensitive client data after a May 2026 social-engineering attack compromised information on over 57,000 individuals. An unauthorized third party impersonated IT staff and tricked a Blank Rome attorney into uploading confidential files to an external Google Drive account, exposing names, Social Security numbers, and potentially financial and medical records. The lawsuit names Blank Rome as defendant and alleges violations of common law, industry standards, the Federal Trade Commission Act, and HIPAA due to inadequate cybersecurity safeguards and delayed notification.