Cyber Incident Victim: Fried Frank, Harris, Shriver & Jacobson LLP
Date:
Oct 2025
Location:
United States of America
Summary
Fried Frank, Harris, Shriver & Jacobson LLP is facing a second class-action lawsuit related to a cybersecurity breach that compromised client data. The lawsuit alleges that the firm’s insufficient security measures allowed unauthorized access to sensitive information, resulting in claims for damages and prompting the firm to defend its practices in court. The case follows an earlier legal action concerning the same incident, adding to the firm’s ongoing litigation over the breach.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In October 2025, Fried Frank, Harris, Shriver & Jacobson LLP experienced a cyber-incident that resulted in a data breach. The incident prompted legal proceedings, leading to an initial class-action lawsuit against the firm. According to the February 17, 2026 Law.com report, Fried Frank was sued again on a Saturday in February 2026. This second lawsuit marks the firm's second class-action action related to the same October 2025 breach. Fried Frank is identified as an Am Law 100 law firm in the article. The article does not specify the exact date of the Saturday filing beyond noting it occurred in February 2026.
The source material offers no additional details about the nature of the data compromised in the October 2025 incident. It does not describe the attack vector, the duration of unauthorized access, or the methods used by the threat actors. No information is provided regarding when the breach was detected, how it was contained, or what notification procedures were followed. The article does not outline any internal investigations, remedial steps, or security enhancements undertaken by Fried Frank after the incident. Likewise, it does not quote any public statements from the firm concerning the breach or the ensuing litigation. Consequently, the known facts are limited to the timing of the breach and the filing of two class-action lawsuits, with all other aspects of the incident remaining unspecified in the provided source.