Mezha WilmerHale Faces Lawsuit Over Data Breach Exposing Client Information
Article Content
- •WilmerHale is sued for a May 2026 data breach affecting client personal information.
- •The lawsuit claims negligence in safeguarding sensitive data, including social security numbers.
- •The firm reported the breach was isolated and did not involve direct access to their systems.
WilmerHale, a major American law firm, is being sued following a data breach that allegedly exposed sensitive personal information of clients and employees. The lawsuit, filed by Jason Perry in the U.S. District Court for the District of Columbia, claims the firm failed to adequately protect client data, including social security numbers. The breach, which occurred in May 2026, was reportedly isolated, with no direct access to the firm's systems by the unauthorized third party. Clients were notified of the breach on July 10, 2026. The suit seeks unspecified monetary damages and improved security measures. WilmerHale has stated that the incident was quickly contained and that they are enhancing security protocols. This incident reflects a growing trend of cyberattacks targeting law firms, which hold vast amounts of sensitive data.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Wilmer Cutler Pickering Hale And Dorr in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…