The Law Office of Douglas D. Ketterman, P.L.L.C., a San Antonio, Texas-based legal practice, has notified approximately 2,700 individuals that their personal and health information was accessed in a data security incident. Law firms that handle sensitive client records, including medical and financial information tied to litigation, have a responsibility to keep that information secure.
The Law Office of Douglas D. Ketterman, P.L.L.C.’s Data Breach Investigation
The Law Office of Douglas D. Ketterman, P.L.L.C. is a San Antonio, Texas legal practice providing professional representation and counsel to its clients. On August 14, 2026, the firm began notifying affected individuals that their data had been accessed by an unauthorized party.
According to a Texas Attorney General data security breach report documenting the incident, the breach affected the private information of approximately 2,700 individuals and included sensitive information such as names, addresses, Social Security numbers, driver’s license numbers, government-issued ID numbers, medical information, health insurance information, and dates of birth. The firm has not publicly disclosed additional detail about the specific method of unauthorized access, such as whether the incident involved ransomware, a phishing attack, or another form of intrusion.
Law firms are an attractive target for cybercriminals because they routinely aggregate large volumes of sensitive information about their own clients from a wide range of sources, often including medical records, financial account details, and government identification numbers gathered in connection with litigation or case preparation. This breadth of data, when combined in a law firm’s files, can be more valuable to an attacker than what any single source institution might hold about the same individual, since it consolidates multiple categories of sensitive personal information into one place.
The combination of data compromised in this breach, Social Security numbers, driver’s license numbers, and medical and health insurance information, together with dates of birth, creates a heightened risk of both traditional identity theft and medical identity theft for affected individuals. Criminals in possession of this type of combined data can open fraudulent credit accounts, file fraudulent tax returns, or attempt to obtain medical services or prescriptions using a victim’s identity. Affected individuals should also be alert to follow-up phishing attempts that specifically reference this breach or the law firm’s name in an effort to appear legitimate and extract additional personal information.
Notification laws generally require that individuals be informed once an organization has confirmed the scope of a data breach, and Texas, like most states, imposes its own specific breach notification requirements on entities holding the personal information of Texas residents. A breach of this scale, affecting thousands of individuals, is required to be reported to the Texas Attorney General’s office, which is how this incident became part of the public record reviewed here.
When Did This Breach Occur?
The Law Office of Douglas D. Ketterman, P.L.L.C. began notifying affected individuals of this data security incident on August 14, 2026. The firm has not publicly disclosed the specific date or date range on which the underlying unauthorized access itself is believed to have occurred, only the notification date reflected in the Texas Attorney General’s public breach reporting.
What Information Was Breached?
The breach is reported to have exposed individuals’ names, addresses, Social Security numbers, driver’s license numbers, government-issued ID numbers, medical information, health insurance information, and dates of birth.
What You Can Do
If you have received a notice from The Law Office of Douglas D. Ketterman, P.L.L.C. about this data breach, consider taking the following steps:
- Enroll in any free credit monitoring or identity theft protection services offered in the notification letter.
- Place a fraud alert or security freeze with the three major credit bureaus (Equifax, Experian, and TransUnion).
- Monitor your credit reports and financial accounts regularly for unfamiliar activity.
- Review any health insurance explanation-of-benefits statements for services you do not recognize.
- Keep a copy of any notice you received, as it may be needed to support a legal claim.
File a Data Breach Lawsuit Against The Law Office of Douglas D. Ketterman, P.L.L.C.
If you were notified that your personal or medical information was compromised in The Law Office of Douglas D. Ketterman, P.L.L.C. data breach, you may be entitled to compensation. Organizations that collect and store sensitive client data are expected to take reasonable steps to protect it, and when that data is exposed, affected individuals can face a lasting risk of identity theft and fraud.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
