Squire Patton Boggs (US) LLP notified the Vermont Attorney General that a data breach exposed Social Security numbers. The number of affected individuals has not been publicly disclosed. Anyone who receives a notification letter should place a credit freeze or fraud alert immediately and monitor their credit reports closely for signs of identity theft.
| Company | Squire Patton Boggs (US) LLP |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Social Security Numbers |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Squire Patton Boggs (US) LLP Data Breach?
Squire Patton Boggs (US) LLP, an international law firm, has confirmed a data breach involving sensitive personal information. The firm filed a formal notification with the Vermont Attorney General in October 2026. This filing disclosed that Social Security numbers were among the data categories involved in the incident.
The exact date the breach was discovered has not been publicly disclosed. As a result, the full timeline of when unauthorized access occurred, and how long it went unnoticed, remains unclear. However, the firm’s decision to file with state regulators indicates that it completed at least a preliminary review of what happened before notifying affected individuals.
Law firms are frequent targets for cybercriminals because they hold valuable client records, financial files, and personal data. Because the notification does not specify the attack method, it is not yet known whether the breach stemmed from ransomware, unauthorized network access, or another form of intrusion. Squire Patton Boggs likely engaged forensic investigators to determine the scope of the compromise, though the source does not detail those steps.
Who was affected?
The population affected by this breach has not been publicly disclosed in terms of an exact number. Given that Squire Patton Boggs is a large international law firm, those impacted could include current and former clients, employees, or other individuals whose personal information passed through the firm’s systems.
Because law firms often retain records tied to litigation, corporate transactions, and personal legal matters, the affected group could span a wide range of people across multiple states. In addition, it is possible that some individuals affected were not direct clients but were instead connected to legal matters the firm handled on behalf of others. Whether minors are among those affected has not been stated.
What Information Was Potentially Exposed?
According to the breach notification filed with the Vermont Attorney General, the category of information confirmed to be involved was Social Security numbers. This type of data is especially sensitive because it can be used to open new accounts or commit tax fraud in a victim’s name.
- Social Security Numbers
When Social Security numbers are exposed, the risk of identity theft rises sharply. Criminals can use this single data point, often combined with a name and birthdate, to apply for credit cards, loans, or government benefits. Because Social Security numbers rarely change, the window for potential misuse can last for years after a breach occurs.
In addition to identity theft, exposed Social Security numbers can lead to synthetic identity fraud. This happens when a criminal combines a real Social Security number with fabricated personal details to create a new, fraudulent identity. Victims may not discover this type of fraud until debt collectors or tax authorities contact them, which makes early monitoring especially important.
What is the company doing?
Squire Patton Boggs (US) LLP responded to the breach by notifying the Vermont Attorney General, a step required under state data breach notification laws. This filing signals that the firm identified the incident, assessed the exposed data categories, and began the formal notification process required for affected residents.
The firm also filed a separate notification with the Vermont Attorney General in July 2026, suggesting ongoing regulatory engagement related to this matter. Beyond these filings, the source does not specify whether the firm is offering credit monitoring or identity protection services to those affected. Individuals who receive a notification letter should review it carefully for any specific remediation offers.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request copies of their credit reports from all three major credit bureaus. Reviewing these reports regularly can help you catch new accounts or inquiries you did not authorize.
You are entitled to a free credit report from each bureau through AnnualCreditReport.com. Because fraud can take months to surface, consider spacing out your free requests throughout the year so you have consistent coverage.
Consider a Credit Freeze or Fraud Alert
Because Social Security numbers were involved in this breach, placing a credit freeze is one of the strongest protective steps available. A freeze blocks lenders from accessing your credit file, which makes it much harder for criminals to open new accounts in your name.
Alternatively, a fraud alert requires creditors to verify your identity before extending credit. This option is less restrictive than a freeze but still adds a meaningful layer of protection. You can request either option directly through any of the three credit bureaus at no cost.
Watch for Phishing and Scam Attempts
Following any data breach, scammers often send emails or texts pretending to be the breached company. Be cautious of messages asking you to click links, verify account details, or provide personal information.
Instead of clicking on unexpected links, go directly to the official website of any organization that contacts you. If you receive a suspicious message referencing this breach, do not respond, and report it to the Federal Trade Commission.
File Your Taxes Early
Because Social Security numbers can be used to file fraudulent tax returns, filing your own return as early as possible reduces this risk. Tax-related identity theft can delay your refund and create a lengthy dispute process with the IRS.
If you suspect someone has already filed a return using your information, contact the IRS Identity Protection Specialized Unit right away. You may also want to request an Identity Protection PIN from the IRS for added security in future tax years.
Consult a Data Breach Attorney
If you received a notification letter about this breach, you may want to speak with an attorney who focuses on data breach cases. An attorney can help you understand whether you qualify for compensation or participation in a potential class action.
Many attorneys offer free case evaluations, so there is little downside to asking questions. This is especially worthwhile if you experience financial losses or spend significant time resolving identity theft issues connected to this breach.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General