--- title: "BDG Law Group data incident" description: "BDG Law Group confirmed data acquisition after a September 2025 network disruption and issued further notices in October 2026." incident_type: "Cybersecurity incident" status: "active" last_modified: "2026-10-16" canonical_url: "https://www.ally.security/incidents/bdg-law-group-data-incident-2025" markdown_url: "https://www.ally.security/incidents/bdg-law-group-data-incident-2025.md" stix_url: "https://www.ally.security/incidents/bdg-law-group-data-incident-2025/stix.json" --- # BDG Law Group data incident BDG Law Group detected a network disruption on September 11, 2025. Its investigation confirmed that an unauthorized actor acquired information from its environment. Last modified Oct 16, 2026 · 2 sources ## Summary - **Environment:** Law-firm network and stored personal information - **Operational impact:** Network disruption detected in September 2025 - **Financial impact:** No incident cost established in the reviewed evidence ## What happened [BDG Law Group](https://www.bdgfirm.com/) detected a network disruption on September 11, 2025. Its investigation confirmed that an unauthorized actor acquired information from its environment. [2](#source-2) ## Impact The October 2026 public notice says potentially affected information varied by person and could include names, driver’s-license or state-ID numbers, passport numbers, medical information and Social Security numbers. [1](#source-1) BDG reported no evidence of misuse or attempted misuse at notice time. No affected-person total is established in these sources. [1](#source-1) ## Timeline ### September 11, 2025 — Network disruption detected BDG became aware of the disruption. See the [source notice](https://oag.ca.gov/system/files/BDG%20Law%20Group-%20Regulator%20Notice%20Letter_Wave%202_CA_0.pdf). [2](#source-2) ### September 29, 2026 — Supplemental review concluded The individual letter dates completion of the supplemental identity review. See the [source notice](https://oag.ca.gov/system/files/BDG%20Law%20Group-%20Regulator%20Notice%20Letter_Wave%202_CA_0.pdf). [2](#source-2) ### October 14, 2026 — Further notices published BDG published a public notice after further individual notifications. See the [source notice](https://www.prnewswire.com/news-releases/bdg-law-group-provides-notice-following-data-security-incident-302908204.html). [1](#source-1) ### October 16, 2026 — Briefing updated This briefing was last reviewed and updated on October 16, 2026. ## Threat Group & Attack Vector The reviewed notices do not establish an initial access method or identify the attacker. ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - No specific MITRE ATT\&CK technique is currently mapped for this case. ## Response BDG secured its environment with cybersecurity specialists, reviewed the acquired dataset and supplemented that review with internal records. The individual letter says those efforts concluded September 29, 2026. [2](#source-2) BDG sent further notices after locating missing addresses and offered a call center for questions. [1](#source-1) The reviewed letter offered twelve months of credit monitoring and identity-protection assistance. [2](#source-2) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### BDG Law Group Provides Notice Following Data Security Incident official · BDG Law Group · Oct 15, 2026 ### BDG Law Group individual notice of data breach official · BDG Law Group · Oct 14, 2026
Evidence ledger Review the supporting structured claims. 1. **Resulted In · 100% confidence · current** BDG Law Group data incident: BDG Law Group detected a network disruption on September 11, 2025. Its investigation confirmed that an unauthorized actor acquired information from its environment. 2. **Resulted In · 100% confidence · current** Network disruption detected: BDG became aware of the disruption. 3. **Discovered At · 100% confidence · current** BDG Law Group data incident: 2025-09-11 4. **Resulted In · 100% confidence · current** BDG Law Group data incident: Supplemental review concluded 5. **Occurred At · 100% confidence · current** Supplemental review concluded: 2026-09-29 6. **Resulted In · 100% confidence · current** BDG Law Group data incident: BDG secured its environment with cybersecurity specialists, reviewed the acquired dataset and supplemented that review with internal records. The individual letter says those efforts concluded September 29, 2026. 7. **Occurred At · 100% confidence · current** Network disruption detected: 2025-09-11 8. **Occurred At · 100% confidence · current** Further notices published: 2026-10-14 9. **Resulted In · 100% confidence · current** BDG Law Group data incident: BDG sent further notices after locating missing addresses and offered a call center for questions. 10. **Resulted In · 100% confidence · current** BDG Law Group data incident: Further notices published 11. **Resulted In · 100% confidence · current** Further notices published: BDG published a public notice after further individual notifications. 12. **Affected Organization · 100% confidence · current** BDG Law Group data incident: BDG Law Group 13. **Resulted In · 100% confidence · current** Supplemental review concluded: The individual letter dates completion of the supplemental identity review. 14. **Resulted In · 100% confidence · current** BDG Law Group data incident: BDG reported no evidence of misuse or attempted misuse at notice time. No affected-person total is established in these sources. 15. **Resulted In · 100% confidence · current** BDG Law Group data incident: Network disruption detected 16. **Resulted In · 100% confidence · current** BDG Law Group data incident: The reviewed letter offered twelve months of credit monitoring and identity-protection assistance. 17. **Resulted In · 100% confidence · current** BDG Law Group data incident: The October 2026 public notice says potentially affected information varied by person and could include names, driver’s-license or state-ID numbers, passport numbers, medical information and Social Security numbers.