Bridgewater Reports Data Breach Impacting Sensitive Personal and Health Information
Bridgewater recently disclosed a data breach to the California Attorney General’s office, revealing that unauthorized access to its systems may have compromised sensitive personal identifiable information (PII) and protected health information (PHI). The incident was detected on or around December 24, 2025, after suspicious activity was identified within the company’s computer networks.
Following an internal investigation, Bridgewater confirmed that an unauthorized third party accessed or acquired data stored in its systems. The exposed information varies by individual but may include:
- Full names
- Social Security numbers
- Contact details
- Medical records or health-related information tied to legal representation
- Case-related documents
On December 31, 2025, Bridgewater began notifying affected individuals via mail, detailing the specific types of compromised data. As part of its response, the company is offering 12 months of complimentary credit monitoring services to impacted parties. The breach notice filed with California authorities provides further details on the incident.
Source: https://straussborrelli.com/2026/01/12/bridgewater-law-group-data-breach-investigation/
Bridgewater Associates cybersecurity rating report: https://www.rankiteo.com/company/bridgewater-associates
"id": "BRI1768259266",
"linkid": "bridgewater-associates",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Legal Services',
'location': 'California, USA',
'name': 'Bridgewater',
'type': 'Law Firm'}],
'customer_advisories': 'Data breach notification letters sent to impacted '
'individuals with details of exposed information',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Contact information',
'Medical records or medical '
'information',
'Case-related documents']},
'date_detected': '2025-12-24',
'date_publicly_disclosed': '2025-12-31',
'description': 'Bridgewater reported a data breach where sensitive personal '
'identifiable information and protected health information may '
'have been compromised. The breach involved unauthorized '
'access to its computer systems, leading to the potential '
'exposure of personal and medical data.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'and protected health information',
'identity_theft_risk': 'High',
'systems_affected': 'Computer systems'},
'investigation_status': 'Completed',
'recommendations': '12 months of complimentary credit monitoring services for '
'affected individuals',
'references': [{'source': 'Attorney General of California'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
'Attorney General of '
'California'},
'response': {'communication_strategy': 'Data breach notification letters '
'mailed to impacted individuals'},
'title': 'Bridgewater Data Breach',
'type': 'Data Breach'}