On May 8, 2026, law firm WilmerHale disclosed a data incident where an employee mistakenly provided information to an unauthorized third party who misrepresented their identity. The firm stated the incident was isolated and did not involve direct access to its internal systems. Notice letters were sent to affected consumers on July 10, 2026, and state regulators, including California and Vermont, were also notified around this time.
The breach reportedly exposed names, dates of birth, and Social Security numbers. One report indicated that 95,712 residents across Texas, South Carolina, Washington, Massachusetts, New Hampshire, Vermont, and California were impacted. No medical or financial account data exposure was indicated in the gathered material.
Publicly available details are limited, and a full official breach letter from WilmerHale has not been widely released. Further details about the incident may emerge as investigations proceed. A putative class action lawsuit, Perry v. Wilmer Cutler Pickering Hale & Dorr LLP, was filed in July 2026 in the U.S. District Court for the District of Columbia.