Lowenstein Sandler has reported a data breach to a state regulator. This page explains what the public filing says, what has not been disclosed and what clients, employees and others connected to the firm can do now.
The details below come from a state attorney general listing and may change as the firm releases more information.
Lowenstein Sandler LLP’s Data Breach Investigation
Lowenstein Sandler LLP is a national law firm with offices in New York, New Jersey and several other cities. Its own materials describe a practice that serves technology companies, life sciences businesses and investment funds, among other sectors. A firm of that kind holds a wide range of personal information: client contact and identity records, files gathered in transactions and disputes, and the human resources and payroll records of its own lawyers and staff.
The breach became public through the Vermont Attorney General’s security breach notice listing. The entry for Lowenstein Sandler is dated November 13, 2026, the date the breach was reported to the attorney general’s office. The listing classifies the firm as an Other Commercial organization and states that 6 Vermont residents were affected.
That count is small, and it should be read carefully. Vermont reports only its own residents, so the figure says nothing about how many people in other states may have been affected. Organizations in this position often send notices to residents of several states, and they may file separate reports with other regulators. No nationwide total for the firm has been published, and this page does not estimate one.
The listing names a single category of information: Social Security numbers. It does not say whether the numbers belonged to clients, employees, counterparties or other people whose records the firm handled. It does not say whether the numbers appeared in documents, in an internal system or in a file held by an outside vendor, and it does not say whether they were exposed in readable form.
Filings like this one are often the first public sign of an incident, and they tend to be updated or supplemented later. An organization may learn more about the scope of an event after its initial report, and regulators in other states may post their own entries at different times. For that reason, it is sensible to check for updates over the coming weeks rather than treating the first listing as the final word on who was affected.
Equally important is what the filing leaves out. It does not describe how the incident happened, when it began, when it was discovered or whether an outside party obtained any data. Until the firm gives its own account of the incident, the cause and the full scope remain unknown.
A Social Security number is among the most valuable pieces of personal information for fraud. Paired with a name and date of birth, it can be used to open credit accounts, file false tax returns, apply for benefits or take over existing accounts. Unlike a password, it cannot be changed easily, and the harm may appear months or even years after the information leaves an organization’s control. That is why protective steps such as a credit freeze are worth taking early.
Professional services firms are frequent targets for cyberattacks because they hold sensitive information about many clients in one place and often rely on outside vendors for document storage, email and billing. That context describes the sector as a whole. It is not a statement about how this particular incident occurred, which the firm has not explained.
State breach laws require organizations to notify the people affected, and each state sets its own rules for timing and content. If you receive a written notice that refers to Lowenstein Sandler, keep it, since it is the best record of what the firm says was involved and what protection it is offering. If you believe you may be connected to the firm and have not received a notice, you can begin the protective steps below while more details come out.
When Did This Breach Occur?
The listing gives November 13, 2026 as the date the breach was reported to the Vermont Attorney General. It does not provide the date the incident occurred, the date it was discovered or the date notices were sent to affected people. Those dates have not been made public. If the firm or another regulator publishes a fuller notice, compare its timeline with the date on any notice you received.
What Information Was Breached?
According to the Vermont listing, the information involved was Social Security numbers. The listing does not name any other category, and it does not explain whether other details, such as names or dates of birth, were stored alongside the numbers. Because the firm has not published its own notice, it is not clear whether other information was involved. Read any notice you receive closely to see which items apply to you.
What You Can Do
If you received a notice related to Lowenstein Sandler LLP or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Because Social Security numbers are the category listed, consider freezing your credit and requesting an IRS Identity Protection PIN, and check your credit reports for accounts you did not open.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Lowenstein Sandler LLP
Attorneys are looking into the data breach reported by Lowenstein Sandler and want to hear from clients, employees and others who received a notice or believe their information was exposed. A lawsuit has not been confirmed, and whether you can seek compensation depends on what the firm ultimately confirms about the incident. If you received a notice or believe your information was involved, an attorney can explain whether you may be able to join a class action lawsuit.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
