Blank Rome Faces Lawsuits Over Data Breach Impacting 57,000 Clients
Blank Rome, a prominent law firm, is the target of two proposed class action lawsuits following a data breach that exposed the personal information of over 57,000 current, former, and prospective clients. The lawsuits, filed on Monday in the U.S. District Court for the Eastern District of Pennsylvania, allege that the breach compromised sensitive data, including names, Social Security numbers, addresses, phone numbers, email addresses, and birthdates.
The incident occurred in May when a cybercriminal impersonated the firm’s IT department, tricking an attorney into uploading files to an external website. Blank Rome has stated that it believes the lawsuits lack merit and intends to mount a vigorous defense. The firm confirmed the breach but has not provided further details on the scope of the exposed data or potential remediation efforts. The legal actions highlight growing concerns over law firm cybersecurity and the risks of social engineering attacks.
Blank Rome LLP cybersecurity rating report: https://www.rankiteo.com/company/blank-rome-llp
"id": "BLA1783455905",
"linkid": "blank-rome-llp",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '57,000',
'industry': 'Legal Services',
'location': 'United States',
'name': 'Blank Rome',
'type': 'Law Firm'}],
'attack_vector': 'Social Engineering',
'data_breach': {'number_of_records_exposed': '57,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Addresses',
'Phone numbers',
'Email addresses',
'Birthdates']},
'date_detected': '2024-05',
'description': 'Blank Rome, a prominent law firm, is the target of two '
'proposed class action lawsuits following a data breach that '
'exposed the personal information of over 57,000 current, '
'former, and prospective clients. The breach compromised '
'sensitive data, including names, Social Security numbers, '
'addresses, phone numbers, email addresses, and birthdates. '
'The incident occurred when a cybercriminal impersonated the '
'firm’s IT department, tricking an attorney into uploading '
'files to an external website.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': 'Personal information of 57,000 clients',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action lawsuits filed'},
'initial_access_broker': {'entry_point': 'IT department impersonation'},
'post_incident_analysis': {'root_causes': 'Social engineering attack leading '
'to human error'},
'references': [{'source': 'Legal news reports'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuits filed'},
'title': 'Blank Rome Data Breach Impacting 57,000 Clients',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Error (Impersonation)'}