Law Firm Data Breach Lawsuit Exposes Deep Risks for Clients and Raises Privacy Alarms

At KBD Attorneys, we fight to protect individuals and families harmed by corporate negligence—and one of the fastest-growing threats to personal safety today is data breaches involving law firms. A recent class action lawsuit filed against Casner & Edwards, LLP, a prominent Boston law firm, is the latest example of how even respected legal institutions can fail to secure private information, leading to widespread harm and anxiety.

A Breach with Lifelong Consequences

In March 2024, hackers infiltrated Casner & Edwards’ computer systems and stole the private personal data of nearly 13,000 individuals. The data included names, Social Security numbers, financial account information, and more—sensitive information that can easily be used for identity theft, fraud, and long-term financial damage.

The firm didn’t begin notifying affected individuals until May 2025—more than 14 months after the breach occurred. During that time, victims had no way of knowing that their data had been exposed or sold on the dark web, putting their financial and personal well-being in jeopardy.

What Went Wrong?

According to the complaint filed in Massachusetts federal court, Casner & Edwards failed to implement industry-standard cybersecurity practices. This includes inadequate employee training, poor internal controls, and the absence of protocols designed to detect, prevent, and respond to data breaches.

 The resulting damage wasn’t just digital—it was personal.

Victims allege that they’ve suffered:

• Emotional distress, anxiety, and loss of sleep

• Lost time and money trying to prevent identity theft

• Permanent exposure of unchangeable personal data

• Fear of future fraud and compromised credit

One victim, Amy Glavin, became a class representative after receiving a breach notice in 2025. She was an opposing party in a case involving the firm, meaning even those not directly represented by Casner had their data stored and mishandled.

Why Law Firms Are High-Value Targets

Law firms handle a treasure trove of sensitive data—from financial records and business contracts to personal identifiers and confidential case information. Unfortunately, many law firms don’t prioritize cybersecurity the way banks or hospitals do. This makes them prime targets for cybercriminals looking to sell or ransom valuable data.

When firms fail to live up to their duty of care, it’s not just a technical failure—it’s a violation of trust. And for victims, the effects can last a lifetime.

At KBD Attorneys, we know that victims of data breaches aren’t just worried about stolen numbers. They’re worried about being watched, impersonated, or defrauded in the future—all because a company failed to do its job.

Our Legal Perspective: What You Should Know

The Casner case raises serious legal concerns, including:

• Negligence: The firm failed to take reasonable steps to protect user data.

• Negligence per se: Casner allegedly violated FTC data protection guidelines.

• Breach of implied contract: Clients had a reasonable expectation that their private data would be safeguarded.

• Unjust enrichment: The firm allegedly benefited financially while skimping on cybersecurity.

• Breach of fiduciary duty: As a legal representative, Casner had a heightened responsibility to protect client confidentiality.

These legal claims are not just technical—they represent a fundamental failure to uphold the fiduciary and ethical responsibilities of a professional law firm.

The Value of Your Personal Data

According to Experian, stolen personal information—particularly full profiles known as “Fullz” (which may include name, date of birth, SSN, and bank details)—can sell for up to $1,000 on the dark web. When that data is stolen in bulk, as in this case, the market is flooded with new opportunities for identity thieves, hackers, and scam artists.

Once this data is out there, it can’t be put back in the bottle. And that’s why affected individuals must act quickly—and may have legal recourse.

KBD Attorneys Is Investigating Data Breach Claims Nationwide

At KBD Attorneys, we want you to know that we take your privacy seriously. We do not engage in risky data practices and are committed to keeping your information secure at all times. This is all to avoid situations of:

• Identity theft or fraud

• Unauthorized credit card activity

• Damaged credit reports

• Emotional trauma and financial losses

• Time and effort spent on fraud monitoring and repair

We at KBD also believe companies—including law firms—must take accountability when they expose private data to criminals. And we fight to secure financial compensation and accountability on behalf of every client we serve.

What You Should Do If You Received a Breach Notice

If you’ve received a letter from Casner & Edwards—or any organization notifying you of a data breach—you should:

1. Monitor your credit reports for suspicious activity.

2. Change your passwords for all major accounts, especially if you use the same one across platforms.

3. Sign up for credit monitoring and identity theft protection (sometimes offered by the company, but not always enough).

4. Contact a data breach attorney to discuss your legal rights.

Even if you haven’t seen direct harm yet, it can take months or years for identity theft to emerge. Legal action now could protect you and others in the long run.

KBD Attorneys: Trusted Advocates for Data Privacy and Consumer Protection

Whether you’re the victim of a cyberattack, a phishing scam, or a breach caused by corporate negligence, KBD Attorneys is here to help. We take on complex class actions and individual cases to help everyday people fight back against powerful companies that violate public trust.

Have you been notified about a data breach involving your personal information?
You may be entitled to compensation. Our team is standing by to evaluate your case and explain your options.

Contact us today!