Law firm Fox Rothschild hit with class action over data breach

By David Thomas and Mike Scarcella

- U.S. law firm Fox Rothschild was sued on Tuesday in a proposed class action lawsuit for allegedly failing to safeguard sensitive personal data and allowing hackers to access people's names and Social Security numbers in a data breach in May.

Here are the details:

  • The lawsuit alleges that the data breach was carried out by Silent Ransom Group. The group has been targeting law firms since 2023, according to the FBI.

  • The lawsuit was brought by Jasmine Trotter, a Georgia resident who said Fox Rothschild possessed her personal information in connection with an unspecified legal case. Trotter estimated there are thousands of potential class members.

  • Trotter alleged that Fox Rothschild did not issue a notice about the data breach and failed to use reasonable procedures to keep her data secure.

  • Mark McCreary, Fox Rothschild's chief AI & information security officer, in a statement said they're continuing to investigate the breach "and will provide notice as required by applicable law."

  • McCreary said one attorney at the firm was "the victim of a sophisticated social engineering event" and that the breach was limited to a single device.

  • The firm's data security practices "limited the potential scope of this event," McCreary said.

  • Attorneys for Trotter did not immediately respond to requests for comment.

  • Law firms have faced mounting lawsuits stemming from hacking incidents. Some, including Gunster Yoakley & Stewart, Orrick Herrington & Sutcliffe, and Bryan Cave Leighton Paisner, have reached settlements in recent years.

  • Silent Ransom Group claimed responsibility earlier this year for hacking Jones Day, a major law firm that represented President ​Donald Trump in his 2016 and 2020 election campaigns.