Perkins Coie LLP Data Breach Notice (Indiana Attorney General): What Was Exposed & What To Do

When a law firm notifies even a single resident that personal information may have been involved in a security incident, the practical stakes are immediate and personal. Identity details held by counsel are often tied to legal matters, finances, or sensitive life events, so any unauthorized access can leave someone wondering what exactly left the firm’s control and how it might be misused.

Perkins Coie LLP notified Indiana residents of a data breach in a filing reported to the Indiana Attorney General on June 03, 2026. That filing places the incident itself on January 26, 2026, and states that one person was affected. The notice describes the exposed material as personal information. Public detail beyond those points remains limited.

Inside the incident

According to the Indiana Attorney General filing, Perkins Coie LLP experienced a data incident dated January 26, 2026. The firm later submitted its breach notice, which was reported on June 03, 2026. The filing indicates that one individual was affected and that the data involved was characterized as personal information under the breach notification.

No further technical description of how the incident occurred, what systems were involved, or whether data was exfiltrated, encrypted, or merely accessed appears in the disclosed record. The scale is stated as a single affected person. Timing between the incident date and the regulatory report spans roughly four months; the reasons for that interval are not explained in the public notice summary. No threat actor is named, and no ransom, leak-site claim, or forensic finding is attributed in the available facts.

How a breach like this happens

Incidents that lead to law-firm breach notices commonly begin with routine attack paths rather than exotic techniques. Credential phishing, compromised remote-access accounts, misdirected email, or malware on an endpoint can give an unauthorized party a foothold. Once inside a network that stores client or matter-related files, an attacker may copy records, move laterally, or trigger detection that forces the organization to investigate and notify.

In professional-services environments, personal information often sits inside case-management systems, document repositories, email archives, or billing platforms. A single compromised mailbox or shared drive can therefore expose data belonging to one or many individuals. Organizations typically discover such events through internal monitoring, employee reports, or external alerts, then engage counsel and forensics before determining notification obligations under state law. None of these general patterns is confirmed as the method used in the Perkins Coie matter; they simply describe how comparable incidents often unfold when specifics are not published.

Who is Perkins Coie LLP?

Perkins Coie LLP is a large U.S. law firm that advises corporate, technology, political, and individual clients across a wide range of practice areas. Like other major firms, it routinely holds identity data, contact details, financial and transactional records, litigation materials, and other sensitive personal information belonging to clients, opposing parties, employees, and third parties.

A breach at a firm of this type is consequential because the data is rarely generic. Legal files can contain Social Security numbers, dates of birth, financial account information, medical or employment details, and correspondence that reveals private circumstances. Even when only one person is formally counted as affected, the nature of the records can make the exposure more serious than a comparable retail or marketing-list incident. Regulatory filings such as the Indiana notice exist precisely because state law treats that risk as material enough to require disclosure.

What was likely exposed

The breach notification names the exposed data as personal information. It does not itemize fields such as Social Security numbers, driver’s license numbers, financial account data, or medical identifiers. Exact contents therefore remain unconfirmed beyond that broad category.

Organizations in the legal sector typically maintain names, addresses, dates of birth, government identifiers, financial and tax information, and matter-specific documents. Any of those elements could fall under “personal information” in a state notice. Because the public filing does not list the precise data elements for the single affected individual, readers should treat the scope as limited to what the firm itself described and should not assume a fuller inventory without further official clarification.

The real-world impact

For the person whose information was involved, the concrete risks include targeted phishing, account takeover attempts, new-account fraud, or the quiet sale of identity details in underground markets. Even a single record can be enough to open credit lines, file fraudulent tax returns, or craft convincing social-engineering messages that reference real legal or personal context. Monitoring for unusual credit activity, tax transcripts, and unexpected account changes becomes a practical necessity rather than an abstract precaution.

For the firm, the impact includes notification costs, potential regulatory inquiry, client-relations strain, and the operational burden of investigation and remediation. A notice covering one individual still signals that controls or detection around personal data did not fully prevent unauthorized involvement. Public trust in how law firms safeguard client and third-party information can be affected even when the headcount is small. No dollar loss, litigation outcome, or regulatory fine is stated in the available facts.

What to do if you're exposed

If you believe you may be the individual referenced in the Perkins Coie notice, or if you have been a client or related party and receive a direct letter, treat the communication seriously. Place a fraud alert or credit freeze with the major consumer reporting agencies, review credit reports and bank and credit-card statements for unfamiliar activity, and consider a free annual credit report cycle. Keep the breach notice and any reference numbers; they can help when disputing fraudulent accounts. Be alert for phishing that pretends to come from the firm or from tax and financial institutions and that asks for passwords or further personal data.

You can also run a free exposure scan of your email address to check whether that address or related credentials have already appeared in known breach data sets. That step does not replace official notice from the firm, but it can show whether your information has circulated more widely and help you decide how aggressively to monitor accounts going forward. If you later receive additional detail from Perkins Coie or from a regulator about the exact data elements involved, adjust your monitoring and freezes accordingly.

AICompiled with AI assistance from public sources and published under our editorial standards.