Mehri & Skalet PLLC Data Breach — Class Action Review

Mehri & Skalet PLLC is a prominent law firm specializing in complex civil litigation, employment law, class actions, and corporate accountability matters. Because of the nature of legal practice, law firms function as vast repositories of highly confidential and sensitive information. Mehri & Skalet PLLC routinely handles proprietary business records, detailed personnel files, confidential settlement agreements, financial disclosures, and sensitive client communications. To effectively represent their clients and manage active litigation, the firm must collect, process, and retain extensive personally identifiable information (PII) and corporate data, making them an attractive target for cybercriminals seeking high-value targets.

In 2025, Mehri & Skalet PLLC reported a significant data security incident to the New Hampshire Attorney General, alerting affected individuals that their private information may have been compromised. While the full mechanics of the incident continue to be evaluated, breaches affecting legal service providers typically involve sophisticated cyberattacks such as unauthorized network intrusions, ransomware deployments, or the compromise of third-party vendor platforms. In the legal sector, bad actors frequently target network infrastructure to intercept privileged communications, access archived case files, and exfiltrate unencrypted databases containing confidential client and employee records.

The data exposed in security incidents involving law firms typically includes a dangerous combination of full names, Social Security numbers, dates of birth, financial account details, home addresses, and sensitive employment or background investigation records. The exposure of this specific blend of information creates immediate and severe risks for victims. Unlike a lost credit card, foundational identifiers like Social Security numbers and dates of birth cannot be easily changed. When leaked, this data provides cybercriminals with the necessary components to commit identity theft, open fraudulent financial accounts, file false tax returns, and execute targeted phishing scams that can plague victims for years.

As a professional services firm handling sensitive personal data, Mehri & Skalet PLLC had strict legal and ethical obligations to implement robust cybersecurity measures. Under state consumer protection laws and common law duties of confidentiality, the firm was required to maintain reasonable security practices to safeguard electronic records against unauthorized access, exfiltration, and theft. The occurrence of a successful data breach strongly suggests potential vulnerabilities in network monitoring, encryption standards, or access controls, raising serious questions about whether the firm fulfilled its legal duties to protect the private data entrusted to its care.

Receiving a data notification letter from Mehri & Skalet PLLC is a formal acknowledgment that your private information was compromised due to inadequate data security. Legally, this notification establishes the foundation and standing necessary to participate in a class action lawsuit against the firm. Affected individuals do not need to wait until financial fraud has actually occurred to take legal action; the increased, imminent risk of identity theft is recognized as a compensable injury. Our law firm is actively investigating claims related to this breach, and we handle all cases on a contingency fee basis, meaning you pay nothing out of pocket unless we successfully recover compensation on your behalf.