Incident · State breach notice (Massachusetts)
Greenberg Traurig data breach: files from the law firm's legal work taken on August 26, 2026
Compiled from public records. Updated 2026-11-13. By the cisonews.net Desk.
The Greenberg Traurig data breach affected 150,000 people, the total Greenberg Traurig LLP reported to Indiana's attorney general for notices sent on September 8, 2026, for a breach dated August 26, 2026. Greenberg Traurig, which provides legal services globally, says an unauthorized individual obtained a limited number of files it held in connection with its legal work on August 26, 2026. Indiana's attorney general records 150,000 people affected in total, 134 of them in Indiana. The letter names the data involved as names, contact information, dates of birth and Social Security numbers, held because they came up in the firm's legal services. Notices followed 13 days after the incident, with three years of Cyberscout triple-bureau monitoring.
Entries like this one, in Wednesday’s docket
Wednesdays
Unsubscribe any time.
How many people were affected by the Greenberg Traurig data breach?
150,000 in total, according to the number the firm reported to Indiana. The letter gives no count.
| Regulator | Who it counts | Number | Recorded |
|---|---|---|---|
| Indiana attorney general | Total reported by Greenberg Traurig | 150,000 | Notice September 8, 2026 |
| Texas attorney general | Texans | 1,839 | Posted October 2, 2026 |
| Washington attorney general | Washingtonians | 642 | Reported September 26, 2026 |
| Indiana attorney general | Indiana residents | 134 | Notice September 8, 2026 |
| Massachusetts consumer affairs office | Massachusetts residents | 104 | Reported September 10, 2026 |
Texas's attorney general lists 1,839 Texans for Greenberg Traurig, posted on October 2, 2026.
Washington's attorney general lists 642 Washingtonians, reported on September 26, 2026, and names the data as name, Social Security number, full date of birth and "Other".
Massachusetts marks Social Security numbers as breached for its residents. Indiana's total is a round 150,000; the record does not say whether it is exact.
Why did a law firm have my information?
Because it turned up in legal work. The letter says the firm had the information in its systems because it was collected and processed in the ordinary course of providing legal services. The letter does not say which matters the files came from. Other 2026 law-firm notices in this log include Sheppard Mullin, Troutman Pepper Locke and Baker McKenzie.
What happened at Greenberg Traurig?
| Date | Event |
|---|---|
| August 26, 2026 | An unauthorized individual obtains files |
| September 8, 2026 | Notice recorded in Indiana |
| September 10, 2026 | Notice recorded in Massachusetts |
| September 26, 2026 | Report to Washington (642 residents) |
| October 2, 2026 | Texas posts its record (1,839 Texans) |
The firm says it moved quickly to revoke the access, activated its incident response team and investigated with outside security experts. It has since added security measures and monitoring and stepped up staff training on data security. The letter does not say how the individual got the files.
What is Greenberg Traurig offering?
| Item | Detail from the letter |
|---|---|
| Service | Triple-bureau credit monitoring, credit report and credit score from Cyberscout, a TransUnion company, with alerts for 3 years from enrollment |
| Extra | Proactive fraud assistance |
| Help | Representatives available for 90 days from the date of the letter |
The guide to credit monitoring offers compares offers like this one.
What the documents leave open
- How the unauthorized individual obtained the files.
- Which clients' matters the files belonged to.
- Whether 150,000 is an exact count.
How this disclosure's timing compares
Greenberg Traurig disclosed 13 days after the discovery date its notice gives. Across the 206 other state breach notices on cisonews.net that date discovery to the day, the median gap is 100 days.
Other legal & professional services incidents on cisonews.net
- Levin, Sedran & Berman, LLP, Breach notice, first disclosed November 12, 2026
- Employer Solutions Staffing Group, Breach notice, first disclosed November 12, 2026
- Baker Tilly Advisory Group, LP, Breach notice, first disclosed November 9, 2026
- Troutman Pepper Locke, Breach notice, first disclosed October 28, 2026; 63,358 affected in total (Indiana Attorney General)
- Baker & McKenzie, Breach notice, first disclosed October 27, 2026; 25,837 affected in total (Indiana Attorney General)
Sources
- 2026-09-10 · AGreenberg Traurig, LLP, notice of data breach filed with the Massachusetts Office of Consumer Affairs and Business Regulation, published September 10, 2026
- 2026-11-08 · AIndiana Attorney General, data breach year-to-date report (2026), published November 8, 2026
- 2026-11-08 · AMassachusetts Office of Consumer Affairs and Business Regulation, 2026 Data Breach Notification Report, published November 8, 2026
- 2026-11-08 · ATexas Attorney General, data security breach reports, published November 8, 2026
- 2026-11-12 · AWashington State Office of the Attorney General, data breach notifications list, published November 12, 2026
Tier A: the organization itself (including notices it filed with a state attorney general), a regulator or SEC EDGAR. Tier B: established press. Each fact on this page carries its supporting passage in the page source.
Entries like this one, in Wednesday’s docket
Wednesdays
Unsubscribe any time.