Perkins Coie LLP Data Breach — Class Action Review

Perkins Coie LLP is a premier, nationally recognized law firm known for representing Fortune 500 corporations, high-growth technology companies, and high-net-worth individuals in complex litigation, corporate transactions, and intellectual property matters. Because of the elite and sensitive nature of its legal practice, the firm routinely collects, processes, and stores vast quantities of confidential and highly restricted information. This repository of data includes not only internal operational records and proprietary business documents, but also deeply sensitive client data, corporate trade secrets, employee personal identifiable information (PII), and financial records necessary for managing high-stakes legal representations across multiple jurisdictions.

In 2026, Perkins Coie LLP reported a significant cybersecurity incident to the Indiana Attorney General, highlighting vulnerabilities within its digital infrastructure. While the exact vector of the breach remains under investigation, incidents affecting prominent legal institutions typically involve sophisticated cyberattacks such as unauthorized access to network environments, ransomware deployment, or third-party vendor compromises. Law firms are prime targets for cybercriminals and state-sponsored threat actors precisely because they serve as central hubs for confidential corporate and personal data, making a breach of this magnitude a critical failure in maintaining the rigorous digital safeguards expected of elite professional service providers.

The exposure resulting from the Perkins Coie LLP data breach threatens victims with severe and lasting harm, given the types of data typically handled within a major legal practice environment. Compromised records often include full legal names, Social Security numbers, dates of birth, financial account details, tax documents, and confidential correspondence containing personal or proprietary disclosures. When exposed, Social Security numbers and dates of birth provide the exact building blocks malicious actors need to execute identity theft, open fraudulent credit lines, file unauthorized tax returns, and commit financial account takeovers. Furthermore, the exposure of privileged or sensitive client data creates cascading privacy and security risks for affected individuals and corporate entities alike.

As a custodian of sensitive personal and financial data, Perkins Coie LLP had a stringent legal obligation under common law, state data protection statutes, and the Federal Trade Commission Act to implement robust administrative, physical, and technical safeguards to secure its network. Under Indiana law and broader consumer protection standards, entities holding personal data must maintain reasonable security measures to prevent unauthorized access. The occurrence of this data breach strongly suggests a potential failure in these legal duties, indicating that existing security protocols were either inadequate or improperly maintained, leaving sensitive files vulnerable to interception and exfiltration.

Receiving a data breach notification letter from Perkins Coie LLP is a formal acknowledgment by the firm that your private information was compromised due to their security failures. Legally, this notification establishes the necessary standing to participate in a class action lawsuit aimed at holding the firm accountable for failing to protect your data. You do not need to prove that you have already suffered financial loss or identity theft to seek legal recourse; simply having your confidential information exposed is enough to demand accountability, injunctive relief, and compensation. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.