Skip to content
Data Breaches Impact Multiple Bay Street Law Firms

Data Breaches Impact Multiple Bay Street Law Firms

First seen 30 Oct 2026, 19:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 21:47 UTC
  • •Bennett Jones and McCarthy Tétrault confirmed data breaches affecting client information.
  • •Approximately 31,000 files were reported stolen from McCarthy Tétrault.
  • •Cybercriminals are impersonating IT support to exploit vulnerabilities in law firms.

Bennett Jones LLP and McCarthy Tétrault LLP have confirmed data breaches affecting client information as part of a larger campaign targeting Bay Street law firms. Bennett Jones reported that two employee accounts were compromised on October 19, while McCarthy Tétrault disclosed that approximately 31,000 files were stolen, including sensitive client data. Both firms engaged cybersecurity firms to investigate and remediate the breaches. The Canadian Centre for Cyber Security has warned that cybercriminals are impersonating IT support to gain unauthorized access. Other firms, including Borden Ladner Gervais LLP and Davies Ward Phillips & Vineberg LLP, are also affected, with breaches involving thousands of files. Law enforcement has been notified, and affected clients are being contacted. The investigation is ongoing, and firms are monitoring for further related activity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
Bennett Jones accounts compromised
Two employee accounts at Bennett Jones were accessed by unauthorized third parties as part of a broader campaign targeting law firms.
The Globe and Mail
2026-10-22
McCarthy Tétrault breach detected
McCarthy Tétrault confirmed a major data breach, identifying unauthorized access to approximately 31,000 files.
The Globe and Mail
2026-10-30
Breach details disclosed
Bennett Jones and other firms confirmed the breaches and began notifying law enforcement and affected clients.
The Globe and Mail

More articles in this cluster (2)

Following this threat?

Track Bennett Jones in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

What information was compromised?
The breaches involved client information, including sensitive files and revenue reports.
How many firms are affected?
At least four Bay Street law firms have reported breaches, including Bennett Jones and McCarthy Tétrault.
What should affected clients do?
Affected clients should monitor their accounts for suspicious activity and follow guidance from their law firms.