Baker McKenzie and Troutman disclose separate social-engineering breaches

Baker McKenzie and Troutman Pepper Locke disclosed separate data breaches caused by social engineering. Baker McKenzie said a threat actor deceived two users on August 14 and 17 and obtained a limited number of files. A Texas filing lists 25,837 people affected and says Social Security numbers and medical information were involved.

Troutman said an employee responded to communications that appeared legitimate and mistakenly sent documents to an unauthorized person on August 7. Its California notice says the documents contained names and other personal information, while the state’s breach listing identifies Social Security numbers. Both firms said the attackers did not gain independent access to their systems, and both offered 24 months of identity protection. Troutman did not publish an affected-person count.