Troutman Pepper Locke LLP
Incident posture
Linked entities
- Victim
- Troutman Pepper Locke LLP
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
Troutman Pepper Locke LLP experienced a data breach after an employee was targeted by a social engineering attack and interacted with fraudulent communications, prompting the firm to hire a cybersecurity specialist and notify the FBI. The breach exposed personal information of approximately 37,000 individuals, leading to a proposed class action lawsuit filed in federal court in Atlanta by a West Virginia resident who claims to be among those at risk of fraud and identity theft.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
Troutman Pepper Locke LLP, one of Atlanta’s largest and oldest law firms with more than 1,600 attorneys across over 30 offices, experienced a data breach that began on August 7, 2026. The firm disclosed that an employee was targeted by a social engineering attack and interacted with communications that appeared legitimate but were not. Following the incident, the firm engaged a cybersecurity specialist and notified the Federal Bureau of Investigation. A statement released on the following Monday confirmed the timeline and the firm’s response actions.
On the Thursday after the statement, a West Virginia resident filed a proposed class action lawsuit in federal court in Atlanta on behalf of himself and approximately 37,000 other individuals. The plaintiff alleges that his private information, along with that of the other putative class members, was exposed in the breach. The complaint asserts that the exposed data places the affected individuals at risk of fraud and identity theft. The lawsuit seeks compensation for the alleged harm and for the ongoing risk of misuse of the exposed information.
The firm has indicated it is cooperating with investigators by engaging a cybersecurity specialist and notifying the FBI. The lawsuit remains pending in federal court, with the plaintiff seeking to represent the class of approximately 37,000 individuals. No further details about the specific data elements allegedly exposed have been made public in the article.
Sources
Sources available to members: 1 source.