UPDATED: August 11, 2026

Ginsberg Jacobs LLC Data Breach

Ginsberg Jacobs LLC, a Chicago law firm, notified individuals in August 2026 that unauthorized access to its network in July 2025 may have exposed personal information tied to the firm’s prior representation of clients through Bernstein Law Firm.

Ginsberg Jacobs LLC

Date of Breach: On or around July 7, 2025 (investigation concluded July 17, 2026)

Who was affected:

Clients of Ginsberg Jacobs LLC

Impacted Data:

Full name and additional information not specified in the publicly filed notice

Experienced a BREACH?

Ginsberg Jacobs LLC, a Chicago-based law firm, began notifying individuals in August 2026 that unauthorized access to its network may have exposed personal information. The firm’s notice explains that the information at issue was maintained in connection with the Bernstein Law Firm’s prior representation of affected individuals or organizations, after Bernstein Law Firm’s attorneys joined Ginsberg Jacobs. This kind of situation, where a merger or attorney transition brings legacy client records into a new firm’s systems, means people who were never direct clients of the receiving firm can still be affected by a later security incident.

Ginsberg Jacobs LLC’s Data Breach Investigation

According to a notice filed with the Massachusetts Attorney General’s Office, Ginsberg Jacobs discovered unauthorized access to its network had occurred on or around July 7, 2025. The firm states it immediately launched an investigation with outside cybersecurity professionals, and that its comprehensive investigation and document review concluded on July 17, 2026, roughly a year after the initial intrusion. The firm has not publicly disclosed the specific method used to gain unauthorized access to its network.

Law firms increasingly find themselves managing legacy data inherited through mergers, attorney moves, and firm consolidations, which can create records whose full scope isn’t always immediately apparent even to the firm holding them. The extended gap between the July 2025 intrusion and the July 2026 conclusion of the document review illustrates how thorough forensic reviews of legal records, often involving privileged and case-specific material, can take considerably longer than a typical corporate data breach investigation.

Personal information tied to legal representation can be especially sensitive because it may include not just standard identifiers but also details related to the underlying legal matters themselves, information that can carry consequences well beyond typical financial fraud risk if it is misused or disclosed.

When Did This Breach Occur?

According to the notice, unauthorized access to Ginsberg Jacobs’ network occurred on or around July 7, 2025. The firm’s investigation and document review concluded on July 17, 2026, and notification letters to affected individuals are dated August 6, 2026.

What Information Was Breached?

Ginsberg Jacobs’ filed notice states that the affected individual’s full name was removed from the firm’s network in connection with this incident, along with additional information the notice does not specify in the publicly filed template version. The firm states other confidential information may also have been impacted, and is offering identity theft protection because sensitive personal data may be involved, though the exact categories are not confirmed in the publicly available notice.

What You Can Do

Ginsberg Jacobs is offering affected individuals complimentary credit and CyberScan monitoring through IDX, along with a $1,000,000 insurance reimbursement policy and managed identity theft recovery services. Individuals who received a notice should also consider taking these additional steps:

Enroll in the complimentary IDX identity protection services before the November 6, 2026 deadline
Place a fraud alert or security freeze with Equifax, Experian, and TransUnion
Request a free credit report at annualcreditreport.com
Review financial account statements and credit reports regularly for irregular activity
Report any suspected identity theft to local law enforcement or your state Attorney General

File a Data Breach Lawsuit Against Ginsberg Jacobs LLC

If you received a notice from Ginsberg Jacobs LLC about this security incident, you may have legal options available to you. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?

Other Data Breaches

Florida Tile

Date of Breach: Not publicly disclosed

GCSS Advisors

Date of Breach: Not publicly disclosed

Ginsberg Jacobs LLC

Date of Breach: On or around July 7, 2025 (investigation concluded July 17, 2026)

Frequently Asked Questions

What Should I Do If I Believe My Data Has Been Breached?

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

What Happens to Your Data in a Data Breach?

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

How Should I Respond to a Data Breach Notification?

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

What Evidence is Needed for a Data Breach Claim?

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Can a Company Be Sued for a Data Breach?

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

What is the Average Settlement in a Data Breach Lawsuit?

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.