Berger & Williams data breach

What we know

Berger & Williams operates as a prominent professional services firm, specializing in complex corporate litigation, intellectual property protection, and high-stakes commercial advisory services. Because of the sensitive nature of their practice, the firm routinely handles, transmits, and stores an extensive volume of confidential information. This includes detailed corporate records, proprietary trade secrets, financial dossiers, and sensitive Personally Identifiable Information (PII) belonging to corporate executives, individual litigants, and third-party stakeholders. The absolute necessity of maintaining client confidentiality means that Berger & Williams occupies a position of high trust, managing massive digital repositories filled with information that malicious actors find exceptionally valuable on the dark web.

In 2026, Berger & Williams formally reported a significant security incident to the Vermont Attorney General's Office, alerting clients and regulatory authorities to an unauthorized intrusion into their digital environment. For a specialized legal and professional services institution, an incident of this magnitude typically involves sophisticated cyberattacks, such as targeted ransomware deployment, unauthorized access to legacy document management systems, or a third-party vendor compromise that bypassed perimeter security controls. Threat actors increasingly target law firms because they serve as central hubs connecting multiple corporate entities, making them lucrative gateways for broader enterprise exploitation and extortion campaigns.

The resulting data exposure presents severe, multi-faceted risks to every individual whose records were compromised within the Berger & Williams systems. Exposed data categories frequently include full legal names, Social Security numbers, dates of birth, confidential communications, banking details, and sensitive tax or corporate financial documents. When malicious actors obtain Social Security numbers and financial identifiers, victims face an immediate and persistent threat of identity theft, fraudulent credit card applications, and unauthorized tax return filings. Furthermore, the compromise of confidential legal and corporate correspondence exposes clients to targeted phishing schemes, corporate espionage, and reputational harm, transforming a digital security failure into a prolonged personal and financial crisis.

Under both Vermont state data protection statutes and broader regulatory frameworks, legal entities like Berger & Williams are held to stringent standards regarding the safeguarding of confidential client and employee data. These obligations require the implementation of robust administrative, physical, and technical safeguards, including multi-factor authentication, regular penetration testing, network segmentation, and prompt vulnerability patch management. The occurrence of a data breach of this scale strongly indicates potential failures in adhering to these mandatory security standards. A preventable network intrusion suggests that foreseeable risks were inadequately mitigated, opening the firm to significant legal liability for negligence and breach of implied contract.

Receiving a formal data breach notification letter from Berger & Williams serves as a critical legal acknowledgment that your private information was compromised due to their security lapses. Legally, the receipt of this letter establishes the requisite standing to participate in a class action lawsuit aimed at holding the firm accountable for failing to protect your data. Importantly, affected individuals do not need to demonstrate actual financial loss or identity theft to join a class action; the increased risk of future harm and the cost of mitigation are recognized legal injuries. Our firm handles these complex data privacy cases on a strict contingency fee basis, meaning you pay nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.

See every breach reported in Vermont or read what to do after a ransomware attack.