Law Firm Faces Data Breach Class Action From Consumers Extending Beyond Client Base

A group of consumers sued a law firm for a data breach that allegedly exposed their personal information despite never having an affiliation with the firm, raising concerns about its allegedly unauthorized collection and storage of their sensitive data.

Takeaway: Law firms, which are regularly tasked with storing large amounts of confidential client information, have become frequent targets for cybercriminals, who in recent years have hacked law firms of all sizes. Law firms are often sued over the breaches, but this suit raises claims from people who had no connection to the law firm, which is unlike most other data breach litigation.