McDermott Will & Schulte Data Breach

McDermott Will & Schulte LLP has notified regulators of a data breach involving Social Security numbers, health records, and other sensitive personal and financial information — the kind of file a law firm keeps on its own people, not just its clients.

McDermott Will & Schulte LLP reported a data breach to the Vermont Attorney General on August 28, 2026, categorized as “Other Commercial.” The filing confirms exposure of Social Security numbers and health records. Additional reporting on the notice describes a broader set of exposed information, including full names, dates of birth, home addresses, wage and compensation information, tax return information, direct deposit account details, and confidential correspondence. The notice indicates approximately 15 Vermont residents were affected — likely a state-specific figure rather than the total number of people affected nationwide, since Vermont’s regulatory filings typically report only the count of Vermont residents involved.

Source: Vermont Attorney General Security Breach Notice for McDermott Will & Schulte LLP (reported 08/28/2026); independent breach-tracking coverage of the same filing (08/31/2026).

A Combination of Financial, Tax, and Health Data

The mix of information involved here is broad: Social Security numbers, dates of birth, and home addresses that can be used for identity theft; wage, tax return, and direct deposit information that can be used for tax fraud or to redirect a paycheck; health records that can be used for medical identity theft; and confidential correspondence that may include sensitive personal or client-related details. This combination is more commonly associated with an organization’s own payroll and human resources files than with client case files, though the notice does not specify which category of individual is affected.

What Information Was Exposed?

• Full name
• Date of birth
• Home address
• Social Security number
• Wage and compensation information
• Tax return information
• Direct deposit account details
• Health records
• Confidential correspondence

How Many People Are Affected?

The Vermont Attorney General filing indicates approximately 15 Vermont residents were affected. McDermott Will & Schulte LLP has not disclosed a total number of affected individuals nationwide.

What Is McDermott Will & Schulte LLP Offering Affected Individuals?

McDermott Will & Schulte LLP has not publicly disclosed whether it is offering credit monitoring or identity protection services. Anyone who received a notice letter should review it directly for enrollment instructions or contact information specific to the offer made to them.

Your Information Is at Risk

Social Security numbers combined with tax return and direct deposit information create a heightened risk of tax refund fraud and payroll diversion, on top of the usual risks of new account and credit fraud. Health records add the risk of medical identity theft. Affected individuals should watch for unexpected tax filings under their name, monitor bank accounts and paychecks for unauthorized changes, and review credit reports for unfamiliar activity.

Do You Have Legal Options?

Organizations that collect and store Social Security numbers, tax and financial information, and health records have a legal duty to secure that data and to notify affected individuals without unreasonable delay — a duty that applies to a law firm’s handling of its own employee and client data just as it would to any other organization.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review if you received a notice letter from McDermott Will & Schulte LLP.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

FAQ

Who is affected by the McDermott Will & Schulte LLP data breach?

The Vermont Attorney General filing indicates approximately 15 Vermont residents were affected. A total nationwide figure has not been disclosed.

What information was exposed?

Full name, date of birth, home address, Social Security number, wage and compensation information, tax return information, direct deposit account details, health records, and confidential correspondence, according to the Vermont regulatory filing and reporting on it.

Does this affect firm employees or clients?

The notice does not specify. The mix of data involved — wage, tax, and direct deposit information alongside health records — is more typical of an organization’s own personnel files, but confidential correspondence could point to client-related records as well. If you received a notice letter, it should clarify your specific situation; we’re happy to help you review it.

When did the breach happen?

The Vermont filing does not disclose an intrusion or discovery date. The notice itself was reported to Vermont regulators on August 28, 2026.

Has a lawsuit been filed against McDermott Will & Schulte LLP over this?

Not that we’ve found as of this writing. Emery | Reddy is currently investigating potential claims and gathering information from affected individuals.

Do I have a legal claim?

Organizations that collect and store Social Security numbers, tax and financial data, and health records have a legal duty to secure that data and to notify affected individuals without unreasonable delay. If you received a notice letter from McDermott Will & Schulte LLP, contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.