The law firms in the graphic below submitted data breach notifications to state authorities, reporting when the personal information of employees, clients or other personnel linked to them may have been exposed.

The reports include law firms that may have experienced breaches directly or through third parties, including vendors. (Scroll past the graphic for more on the disclosures and our methodology.)

For a reporting investigation into legal industry data leaks, Law.com submitted open records requests to 14 states for law firm breach notifications from 2013 through 2018. For other states, we inspected state government websites that list security notices, including some breaches in 2019 and breaches before 2013.