Reuters, citing information disclosed by multiple institutions and companies, reported that law firms are becoming frequent targets of cyberattacks, and some of the stolen documents have been posted on the dark web. At the same time, encryption-related companies such as Coinbase, Ledger, SafePal, and Trezor have also successively disclosed incidents of customer information leaks in recent years, once again drawing market attention to the risks of personal data security.
Greenberg Traurig Files Flow onto the Dark Web
International law firm Greenberg Traurig stated that unauthorized individuals obtained a small number of documents and posted them on the dark web. The report did not mention a larger-scale system breach, but this incident is considered part of a recent wave of data breaches involving law firms.
Data from BakerHostetler shows that in 2025, it handled nearly 60 cybersecurity incidents involving law firms, which is nearly twice the number in 2024. A report for 2026 released earlier this year by the same institution also mentioned that among over 1,250 incidents across industries in 2025, phishing accounted for about 30%.
Multiple law firms disclose that client information has been leaked
Apart from Greenberg Traurig, other law firms have also disclosed security incidents involving personal information. Reports mention that Taft Stettinius and Hollister discovered abnormal system activity in March 2026, which led to the exposure of clients' social security numbers.
WilmerHale and Eckert Seamans are also facing litigation due to related data breaches, indicating that after the law firm was attacked, the risks have expanded from internal systems to customer privacy and legal responsibilities.
In recent years, encryption companies have also been successively targeted.
The report also reviewed several data breach incidents in the cryptocurrency industry. In May 2025, Coinbase disclosed that criminals bribed overseas customer service staff to steal personal information from 69,461 users, including names, addresses, phone numbers, and images of government-issued identification documents. The exchange stated that funds, passwords, and private keys were not affected.
At that time, they refused to pay a ransom of $20 million and stated that they would offer an equal amount as a reward for any information that could help arrest and convict the attackers.
In January 2026, Ledger confirmed that its e-commerce partner, Global-e, experienced a data breach, affecting the order information of some Ledger.com users. Ledger stated that the incident stemmed from unauthorized access to order data within the Global-e information system.
In August of the same year, SafePal reported that a vulnerability in an order tracking plugin led to the exposure of names, emails, delivery addresses, phone numbers, and purchase information of approximately 39,798 customers, but wallet credentials and payment information were not affected. Earlier on, Trezor also stated that its third-party email service provider was compromised, and attackers used this to send phishing emails disguised as security alerts, tricking users into believing that their mnemonic phrases were at risk.
Overall, such incidents are expanding from single platforms to law firms, hardware wallets, and outsourcing service providers. Although the targets of the attacks vary, the common risk points all focus on customer identity information, order data, and phishing attack vectors.
