Law Firm Specializing in Data Breaches Hit by Hackers

According to Techcrunch , law firm Orrick, Herrington & Sutcliffe said hackers broke in in March 2023, stealing personal information and sensitive health data of more than 637,000 people from a file shared on the internal network.

Orrick is a San Francisco-based law firm that specializes in working with companies that have experienced cyber security incidents, including data breaches, handling legal requirements such as obtaining victim information to notify affected agencies and individuals.

In a breach notification sent to affected individuals, Orrick said hackers stole a variety of data from systems related to security incidents at companies for which it provides legal advice. The stolen data included names, dates of birth, addresses, emails, social security numbers, passport and driver’s license numbers, and taxes. The information also included medical diagnoses and treatments, insurance claims, online account credentials, and credit and debit card numbers.

It’s not yet clear how hackers broke into Orrick’s network or whether a ransom was demanded to keep it from being made public. In December, the company told a San Francisco federal court that it had reached an agreement in principle to settle four class-action lawsuits that accused it of failing to notify victims of the breach months after it occurred.