**Goldman Sachs Alerts Fund Clients to Third-Party Law Firm Data Breach**
Goldman Sachs has notified its fund clients about a data breach affecting an external law firm, as reported by Bloomberg News. The incident underscores the growing risks of third-party vulnerabilities in financial services.
While details remain limited, the breach appears to involve sensitive client information handled by the law firm, potentially exposing data tied to Goldman Sachs’ fund operations. The timing and scope of the exposure have not been disclosed, nor has the identity of the affected law firm.
This incident highlights the cascading impact of supply chain attacks, where breaches at external partners can compromise even well-protected institutions. Financial firms increasingly rely on third-party vendors for legal, administrative, and technological services, amplifying the potential fallout from such incidents.
As of now, no further public disclosures or regulatory filings have provided additional context. The breach serves as a reminder of the persistent threat posed by interconnected business ecosystems in the financial sector.
Goldman Sachs cybersecurity rating report: https://www.rankiteo.com/company/goldman-sachs
"id": "GOL1766613328",
"linkid": "goldman-sachs",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Fund clients',
'industry': 'Banking/Investment',
'name': 'Goldman Sachs',
'type': 'Financial Services'},
{'industry': 'Legal Services',
'name': 'Outside Law Firm (Unnamed)',
'type': 'Law Firm'}],
'description': 'Goldman Sachs warns its fund clients about a data breach '
'involving an outside law firm.',
'references': [{'source': 'Bloomberg News'}],
'title': "Outside Law Firm's Data Breach Affecting Goldman Sachs Fund Clients",
'type': 'Data Breach'}