In 2026, Epiq Global, a US-based legal services company, experienced a data breach. The incident was reportedly caused by a criminal actor exploiting a vulnerability within a third-party business application. Epiq Global discovered unauthorized access to a limited segment of its network, which occurred between August 10, 2025, and October 7, 2025.
The investigation and data analysis were completed on May 8, 2026. The exposed data included Social Security numbers, dates of birth, and an indicator of whether an individual self-identified as having a disability. The exact number of affected individuals and the specific states impacted by this breach have not been publicly confirmed.
Details about data breaches can emerge over time, and notification processes may be delayed.