For Texas Law Firms
How strong is your law firm's email security?
Texas SB 2610 may help limit exemplary damages for eligible businesses that maintain a documented cybersecurity program; not legal advice or a guarantee. The Disciplinary Rules also require competence with the technology you use. Enter your domain or email for an instant audit.
Texas SB 2610
SB 2610 may help limit exemplary damages for eligible businesses that maintain a documented cybersecurity program; not legal advice or a guarantee. The law scales with firm size while you meet your ethical duty to safeguard client confidences.
Tier 1: Under 20 Employees
Requires strict access controls (unique accounts + least privilege), documented password policies with mandatory MFA, and regular security awareness training.
Tier 2: 20-99 Employees
Requires active asset & software inventory, continuous automated security issue management, endpoint protection, and tested data recovery backups.
Tier 3: 100-249 Employees
Requires full alignment with NIST CSF or ISO 27001, advanced 24/7 threat detection, and rigorous third-party risk management.
The Golden Rule: Document everything and formally review your program annually.
SB 2610 may help limit exemplary damages for eligible businesses that maintain a documented cybersecurity program; not legal advice or a guarantee.
Benchmark your firm
Run the free audit, unlock the Full Audit Report for evidence and a Fix Kit, add Domain Watch for DNS drift, and optional Cybersquat Watch from the report when lookalikes appear.
See Services & PricingTexas OAG Watch
Inside the Texas Breach Reports: Law Firms
The Texas Attorney General publishes data security breach notices for incidents affecting Texans. Below we spotlight likely law-firm and legal-service entities in that public database — one example of how exposure plays out in the legal profession.
Law-Firm / Legal-Service Breach Reports
A filtered review of the Texas OAG Data Security Breach Reports database found likely law-firm or legal-service entities in published breach notices from Aug 1, 2025 through Oct 28, 2026.
Largest Reported Breaches
All Listed Law-Firm / Legal-Service Entries
| Law Firm / Legal Entity | Location | Texans Affected | Date Published |
|---|---|---|---|
| Williams Hart & Boundas, LLP | Houston, Texas | 334 | Sep 22, 2025 |
| Mehri & Skalet, PLLC | Washington, DC, District of Columbia | 505 | Oct 27, 2025 |
| Mehri & Skalet, PLLC | Washington, District of Columbia | 3,210 | Nov 21, 2025 |
| TorHoerman Law, LLC | Edwardsville, Illinois | 710 | Dec 19, 2025 |
| Herrman & Herrman PLLC | Dallas, Texas | 13,424 | Dec 22, 2025 |
| Foley & Lardner LLP | Milwaukee, Wisconsin | 876 | Dec 29, 2025 |
| The Reecer Law Firm PLLC | Denton, Texas | 897 | Jan 27, 2026 |
| Wisner Baum LLP | Los Angeles, California | 3,154 | Jan 27, 2026 |
| Fried, Frank, Harris, Shriver & Jacobson LLP | New York, New York | 16,724 | Mar 9, 2026 |
| Gearhiser, Peters, Elliott & Cannon, PLLC | Chattanooga, Tennessee | 3,717 | Mar 17, 2026 |
| Williams Hart & Boundas, LLP | Houston, Texas | 7,844 | Mar 18, 2026 |
| Law Office of Michael R. De La Paz | San Antonio, Texas | 2,000 | Apr 13, 2026 |
| Rodenburg Law Firm | Fargo, North Dakota | 606 | Apr 24, 2026 |
| Martin & Cukjati, LLP | San Antonio, Texas | 897 | May 5, 2026 |
| Sprouse Shrader Smith PLLC | Amarillo, Texas | 17,666 | May 5, 2026 |
| Berger & Williams, LLP | San Diego, California | 312 | May 6, 2026 |
| Dykema Gossett PLLC | Detroit, Michigan | 6,132 | May 28, 2026 |
| Modjarrad & Associates, PC d/b/a MAS Law | Richardson, Texas | 6,220 | Jun 1, 2026 |
| Tarter Krinsky & Drogin LLP | New York, New York | 325 | Jun 9, 2026 |
| The Carlson Law Firm | Killeen, Texas | 250 | Jun 18, 2026 |
| The Law Offices of Rakesh Mehrotra | Reston, Virginia | 1,029 | Jul 10, 2026 |
| Ernst & Young LLP | New York, New York | 873 | Jul 17, 2026 |
| Goodwin Procter LLP | Washington, District of Columbia | 1,550 | Jul 31, 2026 |
| Bahrie Law, PLLC | Lansing, Michigan | 301 | Aug 14, 2026 |
| The Law Office of Douglas D. Ketterman, P.L.L.C. | San Antonio, Texas | 2,700 | Aug 14, 2026 |
| Wilmer Cutler Pickering Hale and Dorr LLP | Washington, District of Columbia | 80,528 | Aug 21, 2026 |
| Fragomen, Del Rey, Bernsen & Loewy, LLP | Matawan, New Jersey | 379 | Oct 6, 2026 |
| Sheppard, Mullin, Richter & Hampton LLP | Los Angeles, California | 2,326 | Oct 6, 2026 |
| Baker & McKenzie LLP | Chicago, Illinois | 831 | Oct 28, 2026 |
Primary data: Texas OAG Data Security Breach Reports. Entities filtered as likely law firms/legal services by organization name. Data current through Oct 28, 2026. The OAG does not consistently identify attack methods.