Baker & McKenzie LLP, known as Baker McKenzie and based in Chicago, Illinois, has reported a data breach that exposed sensitive personal information. This page summarizes what is publicly known from the Texas Attorney General’s breach report.
Baker & McKenzie LLP’s Data Breach Investigation
Baker & McKenzie LLP, which operates publicly as Baker McKenzie, is a law firm with an office at 300 East Randolph Street in Chicago. On October 28, 2026, the Texas Attorney General’s Office published the firm’s data security breach report. The report states that 831 Texans were affected and that notice was provided to consumers by U.S. Mail.
The Texas report lists two types of information: Social Security numbers and medical information. The report does not describe the cause of the incident, how it was discovered, or the dates on which unauthorized access took place, and it does not say whether the affected people are clients, employees, or other individuals whose records the firm handled.
The figure of 831 applies only to Texas residents. Firms that serve clients and employ people in many states report to each state separately, and the national total can be much larger than any single state’s number. The total number of people affected has not been confirmed here.
The firm has not publicly said what caused the incident. Nothing in the Texas report indicates whether an outside attacker, a vendor, or an internal error was responsible, and it does not say whether credit monitoring or identity protection is being offered. A person who received a letter should rely on it for those details.
Law firms hold a wide range of sensitive records, including client files, employment and benefits records, and documents gathered for litigation or transactions. When a Social Security number appears alongside medical information, the exposure is especially serious: medical details cannot be changed the way a card number can, and the combination can support medical identity theft, fraudulent insurance claims and targeted scams that use real details about a person’s health. Because a Social Security number does not change, the risk of misuse can last for years.
People who receive a notice involving medical information are often advised to review insurance statements and explanations of benefits for services they did not receive, in addition to freezing their credit. State breach laws generally require notification without unreasonable delay. Attorneys are looking into whether Baker & McKenzie LLP took reasonable steps to protect the information it held and whether its notice met the standards that apply.
When Did This Breach Occur?
The Texas report gives the date it was published, October 28, 2026, but does not state the date of the incident or the date the firm discovered it. Baker & McKenzie LLP has not published a timeline in this filing showing when unauthorized access began, was detected or ended, so the timing of the underlying event should be treated as unknown for now.
What Information Was Breached?
The Texas report lists Social Security numbers and medical information. It does not list financial account numbers, payment card numbers or driver’s license numbers. Not every person will have had every category involved, so your notice letter is the best guide to what applies to you.
What You Can Do
If you received a notice related to Baker & McKenzie LLP or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Review insurance statements and explanations of benefits for services you did not receive, and consider asking your health insurer to flag your account for suspicious activity.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Baker & McKenzie LLP
If you received a notice from Baker & McKenzie LLP, or you believe your information was involved, you may have legal options for holding the firm accountable for how it protected your Social Security number, medical information and other sensitive data.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
