Renowned law firm Houser LLP is finding itself on the defendant’s side of the courtroom as two proposed federal class-action suits have been filed against it, following a successful ransomware attack on the firm’s data infrastructure in May 2023. The aforementioned attack reportedly resulted in the exposure of personal data relating to over 325,000 individuals, with both of the proposed class actions arguing that this constituted a failure by the firm to appropriately safeguard the data in its possession.
Filed by Richard McMillen and Mark Giannelli independently, the lawsuits assert that Houser LLP fell short in upholding the standard industry practices for data security, yielding the breach of a vast amount of sensitive information. Notably, the complaints highlight the firm’s alleged failure to detect the intrusion during the first two days of the attack, thereby providing the cybercriminals with an ample window to steal client data.
Details regarding the nature of the exposed data indicate that client names and social security numbers were among the compromised information. However, the scope of the data breach and the full spectrum of affected data points are still being examined.
For legal practitioners and corporations globally, this incident underscores the critical need for stout cybersecurity measures and proactive crisis management. In an era where data breaches are increasingly common, the importance of robust security infrastructure, system monitoring, and stringent data protection protocols cannot be overstated. This case serves as a stark reminder that even entities within the legal sector, who deal with sensitive and confidential client data daily, are not immune from cyber threats.
Both lawsuits against Houser LLP are currently being processed. The dockets No. 8:24-cv-00468 and No. 8:24-cv-00470 provide additional details.
For more detailed coverage on the ongoing litigation, please refer to the full Bloomberg report.