Greenberg Traurig hit by dark web data leak as law firm breaches spike

The incident at Greenberg Traurig joins a lengthening list of cyberattacks against major law firms, including Taft Stettinius & Hollister, Herbert Smith Freehills Kramer, and WilmerHale. While the specific nature of the exposed data remains undisclosed, previous breaches at these firms have compromised Social Security numbers, government identification records, and proprietary health information. In some instances, these exposures have triggered class-action litigation, underscoring the legal and reputational risks associated with system vulnerabilities.

Data from the BakerHostetler 2026 incident-response report illustrates the scale of this systemic challenge. The firm handled nearly 60 cybersecurity incidents involving legal practices in 2025—a twofold increase over the previous year. Across all industries, phishing remains the primary attack vector, while third-party service providers have become a critical point of failure, accounting for one-quarter of all analyzed security lapses. The trend extends beyond the legal sector, as crypto wallet providers and exchanges, including Coinbase and Trezor, report similar unauthorized exposures through external vendors, ranging from email marketing platforms to e-commerce partners.