DocketWise Data Breach Exposes Sensitive Immigration Client Data
In October 2025, DocketWise a software platform used by U.S. immigration professionals detected unauthorized access to credentials linked to a partner-managed repository. According to an April 3, 2026, filing with the Maine Attorney General, an investigation revealed that an unauthorized individual used valid credentials to access and copy repositories tied to DocketWise’s data migration, exposing unstructured law firm client data.
The compromised information includes highly sensitive details such as names, addresses, Social Security numbers, birth dates, driver’s license and passport numbers, financial account and payment card data, government IDs, tax IDs, health insurance policy numbers, medical treatment records, and account usernames with access credentials.
DocketWise serves immigration attorneys, meaning the breach likely impacted individuals involved in legal immigration processes. The law firm Edelson Lechtzin LLP has launched a class action investigation into potential legal remedies for affected individuals, though no lawsuit has been filed at this time. The incident underscores the risks of third-party credential misuse in data security breaches.
Edelson PC cybersecurity rating report: https://www.rankiteo.com/company/edelson-pc
DocketWise cybersecurity rating report: https://www.rankiteo.com/company/docketwise-software
"id": "EDEDOC1775507669",
"linkid": "edelson-pc, docketwise-software",
"type": "Breach",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Individuals involved in legal '
'immigration processes (law firm '
'clients)',
'industry': 'Legal Tech / Immigration Services',
'location': 'United States',
'name': 'DocketWise',
'type': 'Software Platform'}],
'attack_vector': 'Valid Credentials (Third-Party)',
'data_breach': {'data_exfiltration': 'Yes (copied repositories)',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Social Security numbers',
'Birth dates',
'Driver’s license numbers',
'Passport numbers',
'Financial account data',
'Payment card data',
'Government IDs',
'Tax IDs',
'Health insurance policy numbers',
'Medical treatment records',
'Account usernames',
'Access credentials']},
'date_detected': '2025-10',
'date_publicly_disclosed': '2026-04-03',
'description': 'In October 2025, DocketWise, a software platform used by U.S. '
'immigration professionals, detected unauthorized access to '
'credentials linked to a partner-managed repository. An '
'investigation revealed that an unauthorized individual used '
'valid credentials to access and copy repositories tied to '
'DocketWise’s data migration, exposing unstructured law firm '
'client data. The compromised information includes highly '
'sensitive details such as names, addresses, Social Security '
'numbers, birth dates, driver’s license and passport numbers, '
'financial account and payment card data, government IDs, tax '
'IDs, health insurance policy numbers, medical treatment '
'records, and account usernames with access credentials.',
'impact': {'brand_reputation_impact': 'Likely significant due to sensitivity '
'of data',
'data_compromised': 'Highly sensitive personal and financial data',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation',
'payment_information_risk': 'High',
'systems_affected': 'Data migration repositories'},
'initial_access_broker': {'entry_point': 'Partner-managed repository '
'credentials'},
'investigation_status': 'Ongoing (class action investigation)',
'post_incident_analysis': {'root_causes': 'Third-party credential misuse'},
'references': [{'date_accessed': '2026-04-03',
'source': 'Maine Attorney General Filing'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation '
'initiated',
'regulatory_notifications': 'Filed with Maine '
'Attorney General'},
'response': {'communication_strategy': 'Filing with Maine Attorney General'},
'title': 'DocketWise Data Breach Exposes Sensitive Immigration Client Data',
'type': 'Data Breach',
'vulnerability_exploited': 'Misuse of partner-managed repository credentials'}