Blank Rome data breach: a caller posing as IT, files uploaded to Google Drive, 57,577 people notified

Why did I get a letter from Blank Rome?

Blank Rome is a law firm, and the letter opens by saying so: it provides legal services to clients. The letter does not say how the firm came to hold each reader's information, or whose legal matter it came from, so a reader may be named in a client's documents without ever having hired the firm. The guide to letters from companies you never dealt with explains how that happens.

What happened at Blank Rome?

The attack worked through a phone call from someone posing as the help desk. After the upload, Blank Rome says it took the attorney's device offline, deleted the files in the Google Drive account, and began an investigation with outside cybersecurity professionals. It also notified law enforcement. On or around May 28, 2026, its review found that the files held personal information.

The letter does not say whether anyone opened or copied the files from the Google Drive account before Blank Rome deleted them, or who controlled that account. It does not name a criminal group.

Date	What happened	Source
May 21, 2026	Call and upload; identified within two hours; breach date in Indiana's record	Letter; Indiana record
On or around May 28, 2026	Review finds personal information in the files	Letter
June 26, 2026	Notice sent; Texas and Massachusetts log it	Indiana, Texas and Massachusetts records

Notice went out 36 days after the call, quick next to most entries in the notice-delay guide.

Was Fox Rothschild hit the same day?

Yes. Fox Rothschild, another law firm, says one of its employees was the target of a social engineering attack it calls vishing on the same date, May 21, 2026, and that files were copied and taken. Its notice went to 54,244 people, per Indiana's record. The Fox Rothschild entry has the details. Neither firm's letter mentions the other or says who was behind its call, so the records do not show whether the two calls were linked.

What information was in the Blank Rome breach?

The letter says the information included the reader's name and Social Security number. It may also have included address, email address, phone number, date of birth, taxpayer ID, driver's license or state ID number, passport or other government ID number, financial account number, payment card information, medical information and health insurance information.

The state records show how wide the range was. Massachusetts marks all five of its categories for its 36 residents: Social Security numbers, medical records, financial accounts, driver's licenses and card numbers. Texas lists nine types for its 3,002 residents, among them government ID numbers, medical and health insurance information.

How many people were affected by the Blank Rome breach?

Indiana records 57,577 people in total. Texas's record gives 57,554, 23 fewer, for the same notice date; neither record explains the difference. The state counts are 3,002 in Texas, 191 in Indiana and 36 in Massachusetts. California's record lists May 21, 2026 as the breach date.

What is Blank Rome offering?

Complimentary credit monitoring through Epiq's Privacy Solutions ID, for 12 or 24 months; the filed sample leaves the length as a choice, so each letter gives the term. Questions go to 1-888-289-6921, Monday to Friday, 9 a.m. to 9 p.m. Eastern. The firm says it has given extra targeted social engineering training across the firm and is working with outside cybersecurity professionals on technical measures. The guide to credit monitoring offers compares offers like this.

Was my information in the Blank Rome data breach?

If you got a letter from Blank Rome dated in late June 2026, sent from a processing center in Central Islip, New York, your information was in the uploaded files. Because the files could include medical and government ID numbers, read the list in your own letter closely: it names what applied to you. Other law firm notices in this log, and what they say about client files, are in the law firm breach guide.

What the notice leaves open

• Whether the files were opened or downloaded from the Google Drive account before deletion.
• Whose legal matters the files came from.
• Whether the call to Blank Rome and the one to Fox Rothschild the same day were connected.
• Why Indiana's and Texas's totals differ by 23.