Fried Frank, Harris, Shriver & Jacobson LLP

Summary

Fried Frank is facing a second class-action lawsuit tied to a cybersecurity incident described as a data breach. The firm is among the latest law firms drawn into litigation over such breaches, alongside Thompson Coburn, which is preparing to promptly settle a separate suit over an earlier incident. The article states that it was sued over the cyber-incident, but the accessible content does not provide details about affected data, the number of people impacted, or the claims asserted.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Fried Frank, formally Fried, Frank, Harris, Shriver & Jacobson, became the subject of renewed litigation after a cybersecurity incident that the source identifies as occurring in October 2025. The incident was described as a data breach and as a cyber-incident. By February 2026, the Am Law 100 firm was facing a second class-action lawsuit tied to that 2025 breach. The article dated February 17, 2026 stated that the firm had been sued on Saturday. The available source did not identify the court, plaintiffs, claims, or requested relief in the new lawsuit. It also did not state when Fried Frank first detected the October 2025 incident, how the intrusion occurred, which systems were affected, or what types of data were accessed. The source did not describe any attacker group, ransom demand, extortion notice, or public disclosure by a threat actor. It likewise did not provide a chronology of containment, forensic investigation, customer notification, or remediation steps taken by the firm.

The confirmed impact in the provided material was legal in nature: Fried Frank was facing class-action litigation over the breach. The fact that it was described as the firm’s second class action indicated that the October 2025 incident had already generated prior litigation, although the source did not describe the earlier suit. The article placed Fried Frank among law firms confronting class-action lawsuits over cybersecurity breaches. It also discussed Thompson Coburn separately, stating that Thompson Coburn planned to promptly settle a lawsuit filed February 13 over a May 2024 data breach. That Thompson Coburn matter was presented as a separate incident and was not described as part of Fried Frank’s October 2025 cyber-incident. No Fried Frank response action beyond the existence of litigation was described in the available source. No confirmed business interruption, client harm, regulatory action, financial loss, or data exposure details were provided. The source therefore supports only a limited chronology: an October 2025 cyber-incident or data breach occurred, and by mid-February 2026 Fried Frank was facing a second class action connected to it.

Sources

Sources available to members: 1 source.