Seyfarth Shaw LLP identified on August 18, 2026, that a limited number of documents containing personal information had been sent by email to an unauthorized recipient. The company’s investigation found no evidence of unauthorized access to its network. Seyfarth began notifying affected individuals on September 18, 2026, and breach notices were filed with the California and Texas attorneys general.
The exposed information included names and Social Security numbers. Reports identified more than 500 affected individuals in California, 142 in Massachusetts, and 305 in Texas, but the total number of affected individuals has not been stated as an exact figure. The notice did not identify medical, payment-card, or financial-account information.
The available notices indicate that the incident involved documents sent to an unauthorized recipient rather than a vendor or third-party network intrusion. Further details, including the final affected-person count and any additional regulatory activity, have not been publicly confirmed.