Holland & Knight, LLP notified the Vermont Attorney General in October 2026 that a data breach exposed Social Security numbers. The number of affected individuals has not been publicly disclosed. If you receive a notification letter, place a credit freeze or fraud alert immediately and monitor your credit reports closely for signs of fraud.
| Company | Holland & Knight, LLP |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Social Security Numbers |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Holland & Knight, LLP Data Breach?
Holland & Knight, LLP recently filed a formal data breach notification with the Vermont Attorney General. The filing confirms that unauthorized access to personal information occurred and affected Social Security numbers belonging to certain individuals. This disclosure, submitted in October 2026, is the primary public record describing the incident.
The exact date the breach was discovered has not been publicly disclosed. As a result, the specific timeline of how attackers may have gained access, or how long the exposure lasted, remains unclear. What is known is that the firm determined personal information had been compromised and chose to notify regulators as required by law.
Because this is a legal filing rather than a detailed public report, many operational details are still limited. However, the fact that Holland & Knight, LLP proceeded with formal notification indicates the firm conducted some level of internal review before reporting the incident. Additional information may become available as the investigation continues or as more state filings surface.
Who was affected?
The notification does not state a specific number of affected individuals. Therefore, the total scope of the Holland & Knight, LLP data breach has not been publicly disclosed. It is common for law firms to hold sensitive information belonging to clients, employees, and other parties connected to legal matters.
Because Social Security numbers were involved, the affected individuals may include current or former clients, employees, or other people whose information the firm maintained. The geographic scope of those affected has not been detailed in the filing, though the notification to Vermont indicates at least some Vermont residents are included. People should watch for a direct notification letter to confirm whether they personally were affected.
What Information Was Potentially Exposed?
According to the regulatory filing, the breach involved a specific and sensitive category of personal data. This information can be particularly valuable to criminals because it enables long-term identity theft schemes.
- Social Security Numbers
When Social Security numbers are exposed, the risk of identity theft rises significantly. Criminals can use this information to open new credit accounts, file fraudulent tax returns, or apply for loans in a victim’s name. Unlike a password, a Social Security number cannot simply be changed, which means the exposure can create risk for years after the breach occurs.
In addition to identity theft, exposed Social Security numbers can lead to synthetic identity fraud, where criminals combine a real number with fabricated personal details to create a new, fraudulent identity. This type of fraud can be especially hard to detect. As a result, affected individuals should take proactive steps rather than waiting for signs of misuse to appear.
What is the company doing?
Holland & Knight, LLP filed formal notification regarding this incident with the Vermont Attorney General. This filing is a required legal step when a breach involves residents of that state. The firm’s notification indicates it has taken steps to assess the scope of the exposure and comply with applicable breach notification laws.
Beyond the regulatory filing, the publicly available information does not detail every remediation measure the firm has implemented. However, organizations that file this type of notice typically also notify affected individuals directly and may offer resources such as identity monitoring. Affected individuals should review any notification letter they receive for specific details about protections offered to them.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request a copy of their credit report and review it carefully for unfamiliar accounts or inquiries. You can obtain free credit reports from each of the three major credit bureaus through AnnualCreditReport.com. Reviewing these reports regularly helps catch fraudulent activity early.
Because Social Security numbers do not expire or change, ongoing monitoring is important even months after a breach notification. For example, a fraudulent account could appear long after the initial exposure. Setting a recurring reminder to check your credit report every few months can help you stay ahead of potential misuse.
Consider a Credit Freeze or Fraud Alert
Given that Social Security numbers were involved in this breach, placing a credit freeze with each major credit bureau is a strong protective step. A freeze restricts access to your credit file, making it much harder for identity thieves to open new accounts in your name. This protection is free and can be lifted temporarily whenever you need to apply for credit.
Alternatively, a fraud alert requires creditors to take extra steps to verify your identity before extending credit. This option is less restrictive than a freeze but still adds a meaningful layer of protection. Either option can reduce the chances that a stolen Social Security number leads to new fraudulent accounts.
Stay Alert to Phishing Attempts
After a data breach, affected individuals often become targets of phishing emails, texts, or phone calls designed to extract even more information. Be cautious of unexpected messages that ask you to verify personal details or click on unfamiliar links. Scammers may reference the breach itself to appear more convincing.
Instead of clicking links in unsolicited messages, go directly to the official website of any organization claiming to contact you. This simple habit can prevent you from accidentally handing over additional sensitive information. If something feels off about a message, trust that instinct and verify independently before responding.
Understand Your Legal Options
Individuals affected by the Holland & Knight, LLP data breach may have legal options worth exploring, particularly because Social Security numbers were involved. Consulting with a data breach attorney can help clarify whether you qualify for compensation through a class action or individual claim. Many attorneys offer free initial case evaluations, so there is little risk in asking questions.
Because deadlines for filing claims can vary by state and by the specifics of a case, it is wise to act sooner rather than later. Waiting too long could limit your legal options. A qualified attorney can help you understand what evidence you need and what compensation might be available.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General