Wallace Saunders, a law firm based in Overland Park, Kansas, has disclosed a data security incident that may have exposed sensitive personal information belonging to certain individuals. The incident involved unauthorized access to the firm’s network and potentially affected files containing personal information, financial information, medical information, and materials related to legal representation.
Wallace Saunders notified affected individuals that an unauthorized actor accessed its network between May 16 and May 18, 2026. The firm stated that it has no evidence of misuse or attempted misuse of the information but is providing notice and guidance to help individuals protect their personal information.
Wallace Saunders Data Breach Investigation
According to the notice published by Wallace Saunders, the firm identified unexpected activity on its network on May 18, 2026. After discovering the suspicious activity, Wallace Saunders took steps to secure its environment and engaged digital forensics specialists to investigate the incident.
The investigation determined that an unauthorized actor accessed the firm’s network between May 16, 2026, and May 18, 2026, and had the ability to access certain files stored within the network.
Wallace Saunders reviewed the affected information to determine what data may have been involved and which individuals could be impacted. The firm stated that the accessible information varies by individual and may include sensitive personal and legal-related information.
The company also reported the incident to federal law enforcement and stated that it implemented additional security measures designed to reduce the risk of a similar incident occurring in the future.
Data breaches involving law firms can create unique risks because legal service providers often maintain highly sensitive information belonging to clients and other individuals. Files connected to legal representation may contain personal identifiers, financial details, medical information, and confidential documents.
If exposed, this type of information may potentially be used for identity theft, fraud attempts, phishing campaigns, or other forms of misuse.
When Did This Breach Occur?
The Wallace Saunders data breach involved unauthorized network access that occurred between May 16, 2026, and May 18, 2026.
Wallace Saunders discovered unexpected activity on its network on May 18, 2026, and began investigating the incident with assistance from digital forensics professionals.
The firm has not publicly disclosed how the unauthorized actor gained access to its systems or how many individuals were affected.
What Information Was Breached?
According to Wallace Saunders’ notification, the information potentially involved may include:
- Name
- Social Security number
- Date of birth
- Driver’s license number
- Financial account information
- Medical information
- Documents or materials prepared or provided during legal representation
The specific information involved may vary by individual.
Because the exposed information may include Social Security numbers, financial information, and legal documents, affected individuals may face risks including identity theft, financial fraud, and targeted scams.
What You Can Do
If you received a notice regarding the Wallace Saunders data breach, consider taking the following steps:
- Monitor financial accounts: Review bank accounts, credit card statements, and other financial records for suspicious activity.
- Review credit reports: Obtain free credit reports and check for unfamiliar accounts, inquiries, or changes.
- Consider a fraud alert: A fraud alert can require creditors to take additional steps before opening new accounts.
- Consider a credit freeze: A security freeze may help prevent unauthorized credit accounts from being opened using your information.
- Protect online accounts: Update passwords and enable multi-factor authentication where available.
- Watch for phishing attempts: Criminals may use exposed personal information to create convincing emails, calls, or messages.
- Keep breach communications: Save any letters, notices, or documents received from Wallace Saunders.
- Document suspicious activity: Maintain records of unauthorized activity, expenses, or time spent responding to the incident.
Individuals with questions about the incident can contact Wallace Saunders’ dedicated assistance line at (855) 302-4850, available Monday through Friday from 7:00 a.m. to 7:00 p.m. Central Time, excluding holidays.
File a Data Breach Lawsuit Against Wallace Saunders
Law firms and other organizations that collect and maintain sensitive personal information have a responsibility to implement reasonable cybersecurity safeguards to protect that information from unauthorized access. When a data breach occurs, affected individuals may face privacy concerns, identity theft risks, and costs associated with protecting their personal information.
If your information was exposed in the Wallace Saunders data breach, you may have legal options. A class action lawsuit may allow affected individuals to seek compensation for damages related to privacy violations, identity theft risks, financial losses, and expenses connected to responding to the breach.
By joining together with others affected by the same cybersecurity incident, individuals may be able to hold organizations accountable and encourage stronger protections for sensitive information.
Contact Class Action U to connect with experienced data breach lawyers. If you received a notice or believe your information may have been affected, fill out our secure form to learn more. There is no cost and no obligation to speak with a legal partner.
