Law Firm Orrick Settles Data Breach Class Actions

San Francisco-based law firm Orrick, Herrington & Sutcliffe has reached an agreement to settle consolidated lawsuits brought on behalf of hundreds of thousands of alleged victims of a March 2023 data breach at the law firm, Reuters reports.

The suits accused Orrick of failing to inform victims of the breach until months after the incident.

“This is a fair and reasonable settlement that will resolve all pending litigation from the data breach,” William Federman, a lawyer for the plaintiffs, said in a statement.

“We are pleased to reach a settlement well within a year of the incident, which brings this matter to a close, and will continue our ongoing focus on protecting our systems and the information of our clients and our firm,” said Orrick’s spokesperson.

The cases were brought by plaintiffs whose data had been collected by the clients. There were more than 460,000 victims.

The data includes dates of birth, addresses and Social Security numbers.

It also includes medical information, insurance claims, healthcare insurance numbers and provider details.

“We are pleased to reach this settlement well within a year of the incident, which brings this matter to a close, and will continue our ongoing focus on protecting our systems and the information of our clients and our firm,” Orrick said.