华盛顿,10月8日——一名前Sheppard Mullin员工在一项拟议的集体诉讼中起诉该美国律所,称8月发生的数据安全泄露暴露了社会安全号码和其他敏感个人信息,此案进一步加剧了针对法律行业的数据泄露案件浪潮。
WASHINGTON, Oct 8 - A former Sheppard Mullin employee has sued the US law firm in a proposed class action alleging a data security breach in August exposed Social Security numbers and other sensitive personal information, adding to a growing wave of data breach cases targeting the legal industry.
该诉讼于周三在加利福尼亚联邦法院提起,距该总部位于洛杉矶的律所向加州、德州等州检察长披露泄露事件仅数天。
The lawsuit was filed in federal court in California on Wednesday, days after the Los Angeles-founded firm disclosed the breach to state attorneys general in California, Texas and elsewhere.
律所在披露中称,8月31日的安全泄露暴露了包括社会安全号码和驾照号码在内的信息。
The firm said in disclosures that a security breach on August 31 exposed information including Social Security numbers and driver’s license numbers.
这家拥有1,200名律师的律所本周在声明中表示,泄露涉及的文件数量有限,且未有人访问律所的系统或网络。
The 1,200-attorney firm in a statement this week said the breach involved a limited number of documents and there was no access to the firm’s systems or network.
声明称:“我们已与受影响的客户和个人沟通。我们将继续致力于保护委托给我们的信息,并维护客户的信任。”
“We have already communicated with clients and individuals who were impacted. We remain committed to protecting the information entrusted to us and maintaining our clients’ trust,” the statement said.
针对律所的网络攻击似乎在上升。包括Quinn Emanuel和Herbert Smith在内的其他律所在最近几周也披露了数据泄露。WilmerHale于7月在华盛顿联邦法院因涉嫌数据安全泄露被起诉。
Cyber attacks against law firms appear to be on the rise. Other law firms, including Quinn Emanuel and Herbert Smith, have disclosed data breaches in recent weeks. WilmerHale was sued in federal court in Washington in July following an alleged data-security breach.
Sheppard称,该律所的一名律师是所谓的社会工程事件的受害者。“社会工程”黑客可能涉及诱导人员泄露敏感信息或授予对安全系统的访问权限。
Sheppard said an attorney at the firm was the victim of a so-called social engineering event. "Social engineering" hacks can involve manipulating people into revealing sensitive information or granting access to secure systems.
诉讼称,Sheppard“未能对员工进行足够的网络安全培训,也未能保持合理的安全防护措施或协议”。
Sheppard “failed to adequately train its employees on cybersecurity and failed to maintain reasonable security safeguards or protocols,” the lawsuit said.
原告与该律所的关系仅在她曾在此任职这一点上有所提及。她请求法院批准以集体诉讼的形式代表1,000多名受害者进行诉讼,并寻求超过500万美元的赔偿。
The plaintiff's relationship with the firm was not identified in the lawsuit beyond her former employment there. She asked the court to grant class action status on behalf of more than 1,000 individuals, and is seeking damages of more than $5 million.
该诉讼指控律所存在疏忽及其他违规行为,包括违反了加利福尼亚州关于禁止不公平商业行为的相关法律。
The lawsuit alleges negligence and other violations, including provisions of California's unfair business practices law.
此案案号为2:26-cv-11730,原告为佩娜-埃米莉亚·威廉姆斯,被告为谢泼德·穆林·里克特与汉普顿律所,审理法院为美国加利福尼亚州中区联邦地区法院。原告方代理律师为斯特劳斯·博雷利律师事务所的安德鲁·古内姆与卡莉·罗曼;被告方目前尚未指派代理律师。
The case is Pena-Emilia Williams v. Sheppard Mullin Richter & Hampton, US District Court, Central District of California, No. 2:26-cv-11730 For plaintiff: Andrew Gunem and Carly Roman of Strauss Borrelli For defendant: No appearance yet