Eckert Seamans Cherin and Mellott LLC data breach

What we know

Eckert Seamans Cherin and Mellott LLC is a prominent, full-service corporate law firm representing businesses, institutions, and individuals across a wide spectrum of complex legal matters, including commercial litigation, labor and employment, corporate finance, and intellectual property. Because law firms routinely handle high-stakes corporate transactions, sensitive litigation documents, proprietary business strategies, and comprehensive client files, they serve as centralized repositories for vast amounts of highly confidential information. Beyond corporate assets, legal practices maintain extensive personal identifiable information (PII) regarding their own personnel, opposing parties, expert witnesses, and individual clients, making them prime targets for malicious actors seeking lucrative data. In 2025, Eckert Seamans Cherin and Mellott LLC reported a significant cybersecurity incident to the Nebraska Attorney General, alerting affected individuals to an unauthorized intrusion into their network environment. Incidents of this nature involving prominent legal institutions typically involve sophisticated cyberattacks, such as ransomware deployment, unauthorized access to legacy databases, or the exploitation of vulnerabilities within third-party vendor systems used for document management and client communications. Once inside a law firm's network, unauthorized actors can compromise digital file repositories containing years of archived legal briefs, discovery documents, and internal administrative records. The exposure resulting from a breach of this magnitude typically encompasses a dangerous combination of sensitive personal and financial identifiers, including full names, dates of birth, Social Security numbers, banking details, tax documents, and confidential correspondence. The compromise of such data creates severe, immediate risks of identity theft, financial fraud, and unauthorized account takeover. When sensitive personal data associated with legal proceedings or internal payroll is leaked, victims face prolonged vulnerabilities, including fraudulent credit applications, tax refund fraud, and the potential exposure of sensitive private matters that were entrusted to legal counsel under the strictest expectations of confidentiality. As a professional services organization handling sensitive client and employee records, Eckert Seamans Cherin and Mellott LLC was bound by rigorous legal and professional duties to safeguard this information under state data protection laws, common law standards of care, and applicable federal trade commission guidelines. These obligations required the firm to implement robust technical safeguards, such as multi-factor authentication, regular network penetration testing, data encryption, and continuous security monitoring. The occurrence of a data breach strongly indicates potential failures in these foundational security protocols, raising serious questions about whether the firm exercised reasonable care in protecting the private data entrusted to its custody. Receiving a data breach notification letter from Eckert Seamans Cherin and Mellott LLC is an official acknowledgment that your private information was compromised due to inadequate security measures, and it provides you with the legal standing necessary to participate in a class action lawsuit. You do not need to wait until you suffer actual financial loss or documented identity theft to take legal action; the increased risk of future harm alone establishes a viable claim. Our firm is currently investigating potential class action claims on behalf of all affected individuals. We handle these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.

See every breach reported in Nebraska or read what to do after a ransomware attack.