DocketWise Notifies 143K Over Immigration Platform Data Breach: What Was Reportedly Exposed & What To Do

On May 25, 2026, DocketWise notified 143,480 individuals that personal information had been accessed during an incident in October 2025. The immigration and legal case management platform stated that the access occurred through credential cloning tied to a data migration pipeline and later updated its filing with Maine’s attorney general to reflect the revised total. The notification covers names, addresses, Social Security numbers, financial information, medical information, and passport numbers. No further details on the duration of access, specific files involved, or subsequent use of the data have been released.

Inside the incident

DocketWise reported that the October 2025 event involved the cloning of credentials used in a data migration pipeline. The company disclosed the breach publicly in May 2026 after initial notifications and revised the affected count upward in its regulatory filing. No information has been provided on how the credentials were obtained, how long the access persisted, or whether the data was allegedly exfiltrated beyond the initial access.

How a breach like this happens

Credential cloning typically occurs when authentication tokens or login details are copied from a legitimate session or compromised endpoint. Once obtained, the cloned credentials can be used to access systems that rely on them for automated processes such as data transfers. Migration pipelines are frequent targets because they often require elevated permissions and connect multiple environments, increasing the potential scope of access if the credentials are reused or insufficiently protected.

About DocketWise

DocketWise operates an immigration and legal case management platform. Organizations in this sector routinely collect and store detailed client records to support visa applications, asylum claims, and other proceedings. These records commonly include biographical data, identification documents, financial statements, and health information required by government agencies. A compromise at such a platform can affect individuals already navigating complex legal processes where data accuracy and privacy carry direct consequences for their cases and status.

What was likely exposed

The company has named the categories of information accessed. Public detail on the exact fields or volume within each category remains limited to the reported totals.

• Names
• Addresses
• Social Security numbers
• Financial information
• Medical information
• Passport numbers

Why it matters

Compromised names, addresses, and identification numbers can be combined to open accounts or file fraudulent claims. Financial and medical details add layers of potential misuse, such as targeted scams or insurance fraud. Passport numbers, when paired with other identifiers, may facilitate document-related fraud. For individuals in immigration proceedings, exposure of case-related data can create additional administrative burdens even if no immediate misuse occurs. The organization faces regulatory reporting obligations and the operational task of securing the affected pipeline.

If your data was in this claimed breach

Review account statements and credit reports for unusual activity. Place fraud alerts with credit bureaus if concerned about identity misuse. Change passwords on any accounts that may share credentials with DocketWise or connected services. Readers can run a free exposure scan of their email address against known breach data to check for appearances in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.