2025 Pillsbury Winthrop Shaw Pittman — Apr social-engineering document theft; class action voluntarily dismissed (Jul 2026)
Data compromised
Per litigation and notice summaries: names, Social Security numbers, and financial account details among exposed personal information. Texas AG materials cited 39,573 Texans notified; nationwide total not reconciled in open sources reviewed. Class-action plaintiffs voluntarily dismissed SDNY suit without prejudice after April 2026 stay for mediation (Bloomberg Law / Law360, Jul 2026).
Technical writeup
Verified firm notice with later litigation update — social-engineering incident April 2025; public AG/consumer notifications about November 6, 2025. Pillsbury Winthrop Shaw Pittman LLP told state attorneys general that a sophisticated social-engineering attack allowed an unauthorized actor to convince a single user to enable download of some firm documents briefly; the firm blocked the activity and added safeguards. Consumer notices and class-action pleadings allege exposure of names, Social Security numbers, and financial account information. Texas filings cited 39,573 residents notified; a nationwide attested headcount was not located in English open sources at indexing. Proposed class actions filed mid-November 2025 in SDNY (e.g., Archer v. Pillsbury, 1:25-cv-09613). In July 2026 Bloomberg Law and Law360 reported the named plaintiffs voluntarily dismissed the proposed class suit without prejudice after the court had stayed proceedings in April 2026 for mediation. BreachHistory retains recordsAffected 0 pending a firmwide attested count (Texas subset noted in prose).
Root cause
Sophisticated social engineering: unauthorized actor convinced a single user to enable download of some firm documents in a short period (per firm AG notice); activity blocked and additional safeguards deployed
References
- https://mm.nh.gov/files/uploads/doj/remote-docs/pillsbury-winthrop-shaw-pitman-20251106.pdf
- https://www.reuters.com/legal/government/law-firm-pillsbury-faces-class-action-over-april-data-breach-2025-11-19/
- https://news.bloomberglaw.com/litigation/pillsbury-winthrop-data-breach-suit-ends-after-mediation-bid
- https://www.law360.com/pulse/daily-litigation/articles/2503990/pillsbury-data-breach-suit-voluntarily-dismissed
- https://www.courtlistener.com/docket/71927907/archer-v-pillsbury-winthrop-shaw-pittman-llp/
- https://www.emeryreddy.com/blog/data-breach/pillsbury-winthrop-shaw-pitman-llp-data-breach