Law firm Fox Rothschild hit with class action over data breach
By David Thomas and Mike Scarcella
WASHINGTON, June 9 (Reuters) - U.S. law firm Fox Rothschild was sued on Tuesday in a proposed class action lawsuit for allegedly failing to safeguard sensitive personal data and allowing hackers to access people's names and Social Security numbers in a data breach in May.
Here are the details:
The lawsuit alleges that the data breach was carried out by Silent Ransom Group. The group has been targeting law firms since 2023, according to the FBI.
The lawsuit was brought by Jasmine Trotter, a Georgia resident who said Fox Rothschild possessed her personal information in connection with an unspecified legal case. Trotter estimated there are thousands of potential class members.
Trotter alleged that Fox Rothschild did not issue a notice about the data breach and failed to use reasonable procedures to keep her data secure.
Mark McCreary, Fox Rothschild's chief AI & information security officer, in a statement said they're continuing to investigate the breach "and will provide notice as required by applicable law."
McCreary said one attorney at the firm was "the victim of a sophisticated social engineering event" and that the breach was limited to a single device.
The firm's data security practices "limited the potential scope of this event," McCreary said.
Attorneys for Trotter did not immediately respond to requests for comment.
Law firms have faced mounting lawsuits stemming from hacking incidents. Some, including Gunster Yoakley & Stewart, Orrick Herrington & Sutcliffe, and Bryan Cave Leighton Paisner, have reached settlements in recent years.
Silent Ransom Group claimed responsibility earlier this year for hacking Jones Day, a major law firm that represented President Donald Trump in his 2016 and 2020 election campaigns.
