Plaintiffs Dismiss Class Action Against Fox Rothschild

The lawsuit, which stemmed from a social engineering breach, has been dropped in the Eastern District of Pennsylvania.

Updated on Oct. 29, 2026 in Cybersecurity

Bold flat-color editorial illustration of a heavy brass key on a stone plinth, representing legal resolution.
Plaintiffs have voluntarily dropped their class action lawsuit against Fox Rothschild LLP following a 2026 data breach in Pennsylvania. AI Illustration. Upload story photo >

Live Poll

Do you trust large professional firms to keep your personal data secure from cybercriminals?

Three plaintiffs have voluntarily dismissed a class action lawsuit against Pennsylvania-based law firm Fox Rothschild LLP. The litigation originated following a May 2026 data breach where an attorney was targeted via social engineering.

Why it matters

This dismissal marks the resolution of a legal challenge centered on the firm's data security protocols after an intrusion by the cybercriminal gang known as SilentRansomGroup.

The breach occurred when an attorney fell victim to a social engineering attack, a method of psychological manipulation designed to trick individuals into divulging sensitive information. SilentRansomGroup was identified as the party responsible for the resulting exposure.

The players

Fox Rothschild LLP

A national law firm that provides legal services and was targeted by a cybercriminal gang.

SilentRansomGroup

A cybercriminal organization identified as responsible for the data breach.

The details

Social engineering attacks exploit human error rather than technical system vulnerabilities, often by posing as a trusted entity to gain access credentials. In this instance, the compromise of a single attorney's account led to the exposure of personal information for thousands of individuals, a common outcome in targeted attacks against professional services firms.

Timeline

  1. May 2026: A data breach occurred after a social engineering event.

  2. October 28, 2026: Plaintiffs filed a notice of voluntary dismissal in the US District Court for the Eastern District of Pennsylvania.

The Tech Race

Law firms are increasingly targeted as prime repositories for sensitive client information, escalating the stakes for legal tech security. This case follows the pattern of class action litigation seen in the 2023 litigation regarding law firm data breaches.

For clients of legal services firms in Pennsylvania, this outcome serves as a reminder to monitor personal account activity following reported security incidents. The dismissal of this specific case ends the legal proceedings for these three plaintiffs.

The takeaway

While the litigation has concluded for these plaintiffs, the vulnerability of legal practices to social engineering remains a persistent security concern. Clients should continue to inquire about multi-factor authentication and staff training programs at their professional service providers.

Further reading

For broader trends in industry digital protection, see Cybersecurity.

Source note: This article includes information reported by Bloomberglaw.

Live Poll

Do you trust large professional firms to keep your personal data secure from cybercriminals?