PrivacySignal
Breach

Data at law firms Quinn Emanuel, McDermott exposed in cyber breaches

Reuters · · International · Data Breaches

Two major law firms, Quinn Emanuel and McDermott Will & Emery, have disclosed cybersecurity breaches that exposed client and firm data. The incidents add to a growing pattern of law firms becoming targets for attackers seeking high-value confidential information.

Why this matters: Law firms hold some of the most sensitive information that exists. Litigation strategy, medical records, financial disputes, merger details, personal crises — all of it sits in their systems. People did not choose to hand that data to a law firm. Often they had no other option. When that data walks out the door, the people most exposed are clients who trusted the firm under pressure. Two breaches at firms this size is not a coincidence. It is a signal that the legal industry is being targeted and that client data is the prize.

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
HIPAA Journal · · US Federal

GoodRx & Criteo Revised $32 Million Data Privacy Settlement Gets First Approval

A federal court has granted preliminary approval to a revised $32 million settlement in a class action lawsuit over data privacy claims against GoodRx and advertising technology company Criteo. The case centers on alleged improper sharing of users' personal health and medication data.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy

#breach#enforcement#healthcare#privacy Read original →
Breach
HIPAA Journal · · US Federal

Hospital Ransomware Attacker Receives 70 Month Jail Term

A Ukrainian national who participated in the Nefilim and Hive ransomware operations, targeting hospitals, government agencies, and businesses over roughly three years, has been sentenced to 70 months in federal prison. The case represents one of the more concrete criminal accountability outcomes tied to ransomware groups that specifically hit healthcare infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare#security Read original →
Breach
Nextgov/FCW · · US Federal

DHS personnel leak exposes contact details and sensitive job information

A group calling itself the Department of Peace claims to have obtained records on more than 41,000 Department of Homeland Security employees and contractors, including contact details and sensitive job information. The group says it acted in opposition to immigration enforcement.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →