Orrick Ex-Employee Withdraws Data Breach Lawsuit Shortly After Filing
A former employee of Orrick, Herrington & Sutcliffe voluntarily dismissed a data breach lawsuit against the law firm just hours after filing it in a California federal court. Joseph Casillas, the plaintiff, had sought damages for himself and other alleged victims of a January cyberattack, accusing Orrick of failing to safeguard his personal information.
Casillas’ legal team, including attorney Andrew Gunem, did not immediately respond to requests for comment following the dismissal. The withdrawal was filed without prejudice, meaning Casillas retains the option to refile the complaint in a different jurisdiction.
Orrick has not publicly commented on the case since the lawsuit was dropped. The incident highlights ongoing legal and security challenges for organizations following cyber incidents, particularly when employee data is compromised.
Orrick, Herrington & Sutcliffe LLP cybersecurity rating report: https://www.rankiteo.com/company/orrick
"id": "ORR1777062892",
"linkid": "orrick",
"type": "Breach",
"date": "1/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Legal Services',
'location': 'United States',
'name': 'Orrick, Herrington & Sutcliffe',
'type': 'Law Firm'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (employee personal information)',
'type_of_data_compromised': 'Personal information'},
'date_detected': '2024-01-01',
'description': 'A former employee of Orrick, Herrington & Sutcliffe '
'voluntarily dismissed a data breach lawsuit against the law '
'firm just hours after filing it in a California federal '
'court. The plaintiff, Joseph Casillas, had sought damages for '
'himself and other alleged victims of a January cyberattack, '
'accusing Orrick of failing to safeguard his personal '
'information.',
'impact': {'data_compromised': 'Personal information',
'legal_liabilities': 'Potential damages sought in lawsuit'},
'references': [{'source': 'Cyber Incident Report'}],
'regulatory_compliance': {'legal_actions': 'Lawsuit filed and withdrawn'},
'title': 'Orrick Ex-Employee Withdraws Data Breach Lawsuit',
'type': 'Data Breach'}