Law firms and crypto firms report data breaches exposing personal information
Law firms hit by data breach
Greenberg Traurig, an international law firm, said an unauthorized actor accessed a limited number of documents and posted them on the dark web. The firm notified affected clients, and a Vermont notice confirmed that Social Security information was exposed.
Key points
- Greenberg Traurig breach involved posting documents on the dark web.
- Exposed data included Social Security numbers.
- Other law firms such as Taft Stettinius & Hollister, Herbert Smith Freehills Kramer, WilmerHale, Goodwin Procter and Quinn Emanuel also reported breaches in 2025‑2026.
- Crypto companies Coinbase, Ledger, SafePal and Trezor disclosed separate incidents that leaked personal customer data.
Official statement from Greenberg Traurig
The firm said an unauthorized actor accessed a limited number of documents and posted them on the dark web. It informed affected clients and a Vermont notice identified exposed Social Security information.
Other incidents reported
Taft Stettinius & Hollister detected unusual activity in March 2026 that exposed client Social Security numbers. Herbert Smith Freehills Kramer reported unauthorized access in May that revealed Social Security numbers, government IDs and health records. WilmerHale faced a proposed class action after an alleged May breach. Goodwin Procter disclosed a breach on August 7, and Quinn Emanuel reported a social‑engineering attack on August 14 that exposed stored files.
In the crypto sector, Coinbase said criminals bribed overseas support agents in May 2025 to steal personal data from 69,461 users, though no funds or private keys were taken. Ledger confirmed a January 2026 breach at its e‑commerce partner Global‑e that exposed order data of some Ledger.com customers. SafePal reported an August flaw in an order‑tracking plug‑in that exposed personal details of about 39,798 customers, while Trezor said hackers breached a third‑party email provider and sent phishing emails pretending to be security alerts.
What is confirmed
- Greenberg Traurig’s breach and the posting of documents on the dark web are confirmed by the firm’s statement.
- Multiple law firms have publicly acknowledged data breaches in 2025‑2026.
- Coinbase, Ledger, SafePal and Trezor have each confirmed a security incident that exposed personal customer information.
Unclear details
- The exact number of documents accessed in the Greenberg Traurig breach is not disclosed.
- Specific amounts of data exposed by some law firms, such as WilmerHale, remain unspecified.
- Ledger did not state how many customers were affected by the Global‑e breach.
Why it matters
These breaches show that both legal and crypto companies are targets for cyber‑attacks that can expose sensitive personal data, such as Social Security numbers and government IDs. The incidents highlight the need for stronger security measures and prompt notification to affected individuals.
What happens next
Law firms are notifying clients and working with regulators. Crypto companies are investigating the incidents, fixing vulnerabilities, and, customers about the breaches.
