Victory Disability Suffers Data Breach Exposing Sensitive Client Information
Victory Disability, a Pennsylvania-based law firm specializing in Social Security and VA disability claims, recently disclosed a data breach affecting current and former clients nationwide. The incident, detected in November 2025, involved unauthorized access to systems containing personally identifiable information (PII) and protected health information (PHI).
Between October 27 and November 12, 2025, an unknown party accessed portions of the firm’s network, potentially viewing or exfiltrating sensitive data. Exposed information includes names, contact details, government-issued IDs, Social Security numbers, dates of birth, health insurance details, and medical records.
Victory Disability launched an investigation with third-party cybersecurity experts and notified federal law enforcement and the Vermont and California Attorney Generals’ offices on December 12, 2025. The firm has since secured its systems and is monitoring the dark web for signs of leaked data.
To mitigate risks, affected individuals are being offered 24 months of complimentary credit monitoring and identity protection services. A dedicated call center (877-332-1724) has been established for inquiries. The full scope of the breach, including the number of impacted clients, remains undisclosed.
Source: https://www.claimdepot.com/data-breach/victory-disability-2025
Victory Disability cybersecurity rating report: https://www.rankiteo.com/company/victory-disability
"id": "VIC1765825111",
"linkid": "victory-disability",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Current and former clients '
'across the United States',
'industry': 'Legal Services',
'location': 'Pennsylvania, USA',
'name': 'Victory Disability',
'type': 'Law Firm'}],
'customer_advisories': 'Call center set up at 877-332-1724, Monday through '
'Friday, 8 a.m. to 8 p.m. CT',
'data_breach': {'data_exfiltration': 'Possible viewing or copying of '
'sensitive information',
'personally_identifiable_information': ['Name',
'Contact information',
'Government-issued ID '
'numbers',
'Social Security '
'number',
'Date of birth',
'Health insurance '
'details',
'Sensitive medical '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2025-11',
'date_publicly_disclosed': '2025-12-12',
'description': 'Victory Disability, a Pennsylvania-based law firm '
'specializing in Social Security and VA disability claims for '
'veterans, experienced a significant data breach involving '
'personally identifiable information (PII) and protected '
'health information (PHI) of current and former clients across '
'the United States.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'recommendations': ['Sign up for free Epiq identity theft protection services',
'Monitor credit reports and financial accounts for '
'unusual activity',
'Be alert for phishing emails or phone calls',
'Consider placing a fraud alert or credit freeze with '
'major credit bureaus'],
'references': [{'source': 'Victory Disability Breach Notification'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Attorney '
"General's office",
'California Attorney '
"General's office"]},
'response': {'communication_strategy': 'Notified affected individuals, set up '
'a call center, and offered '
'complimentary credit monitoring and '
'identity protection services',
'containment_measures': 'Secured its environment',
'enhanced_monitoring': 'Monitoring for signs of client '
'information on dark web forums or '
'marketplaces',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Federal law enforcement authorities',
'third_party_assistance': 'Independent cybersecurity experts'},
'threat_actor': 'Unknown',
'title': 'Victory Disability Data Breach',
'type': 'Data Breach'}