24/7 Breach Assistance

Case Studies

Cyber Incident Response Case Study: Law Firm Breach, HIPAA

Download PDF


A large regional law firm representing US-based and international clients across several practice groups, including financial services, healthcare, employment, and IP, experienced a data breach, exposing a dataset of 68,666 documents. Early on, the client believed the dataset contained only PII, but during the initial data assessment, we discovered the dataset also contained PHI, triggering additional notification requirements under HIPAA. Based on this new information, the project scope expanded the notification requirements across forty-four states.


With the data assessment complete, we had a clear picture of the dataset's contents, including document counts, file types, false positives, true hits, file path information, and impacted geographies. With this granular level of detail, we segregated and removed like files, false positives, and data that were alike in every way except format from the relevant data population. We also excluded files containing repeating entities and information, such as excel files, from the downstream review and extraction. This lowered the total costs of the project and allowed us to deliver sooner than our originally anticipated deadline.


CyTrex was referred to the decision-maker on this breach review project by another client saying, "they are so easy to work with. They will do whatever they can to make you look good to your client.”

Share this:

Get breach assistance now.

After a cyber breach, you need a team ready to hit the ground running. We’re here for you 24/7/365. That’s our promise.

Our incident response project managers, data analytics experts, and review specialists are seasoned professionals who understand the magnitude of the situation your company is facing and the related expenses.We are here to ensure timely, accurate notification of affected parties.

CyTrex Cyber - Incident Response Service

CyTrex Cyber helps entities that need assistance managing a cybersecurity incident or that want to learn more about cyber breach management. Insurance carriers, law firms, businesses, government agencies, and educational institutions depend on us for cyber incident response support.

Privacy Policy

© 2023 CyTrex Cyber, Inc

linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram