CohenMalad LLP Data Breach — Class Action Review

As a prominent law firm operating in Indiana, CohenMalad LLP handles a wide array of high-stakes legal matters, including complex litigation, class actions, family law, commercial disputes, and personal injury cases. Because of the nature of legal practice, the firm routinely collects, processes, and stores an immense volume of highly confidential data. This includes detailed client intake files, financial records, Social Security numbers, banking details, sensitive communications, medical records, and proprietary business information necessary for building and litigating cases. Law firms are prime repositories for deeply personal and sensitive information, making them attractive targets for cybercriminals seeking to exploit high-value data.

In 2025, CohenMalad LLP reported a data security incident to the Indiana Attorney General, triggering legal obligations to notify affected individuals and regulatory authorities. While the exact mechanics of every cyberattack vary, incidents involving legal institutions typically stem from sophisticated unauthorized access to internal network environments, compromised employee credentials, ransomware deployments, or vulnerabilities within third-party vendor platforms used for document management and cloud storage. When threat actors infiltrate a law firm's network, they often gain unrestricted access to legacy databases and active case files containing years of accumulated confidential documentation.

The exposure resulting from a breach at a law firm like CohenMalad LLP creates severe and multi-faceted risks for affected clients, employees, and third parties. Compromised data fields frequently include full names, Social Security numbers, dates of birth, financial account details, tax documents, and private legal correspondence. When Social Security numbers and financial data are leaked, victims face an immediate and long-term threat of identity theft, fraudulent credit card applications, unauthorized bank withdrawals, and tax fraud. Furthermore, the exposure of confidential legal records can compromise pending litigation, breach attorney-client privilege, and lay bare private personal or corporate struggles to malicious actors.

Like all entities entrusted with sensitive personally identifiable information, CohenMalad LLP had a legal duty under state consumer protection statutes, common law negligence principles, and industry standards to implement and maintain robust cybersecurity measures. These obligations include utilizing advanced encryption, maintaining strict access controls, conducting regular security audits, and deploying prompt monitoring systems to detect unauthorized network activity. A successful data breach of this magnitude strongly suggests potential failures in these security protocols, indicating that the firm may have fallen short of its duty to adequately protect the private data entrusted to its care.

Receiving an official data breach notification letter from CohenMalad LLP is a formal acknowledgment that your private information was compromised due to inadequate security measures. Under the law, this notification establishes the foundational legal standing required to pursue a class action lawsuit against the responsible entity. You do not need to wait until you suffer actual financial loss or identity theft to take legal action; the increased and imminent risk of future harm is sufficient. Our law firm is actively investigating potential claims on behalf of affected individuals, operating on a contingency fee basis, which means there are never any out-of-pocket costs or fees unless we successfully recover compensation for you.