Davies, McFarland & Carroll 2025 Data Breach
The 2025 Davies, McFarland & Carroll data breach affected 54,712 people after an unauthorized party gained access to the law firm's internal network.
Exposed Data Types
2 sensitive6- Medical information
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Social security numbers
About This Breach
Davies, McFarland & Carroll (DMC) is a Pittsburgh-based defense and litigation law firm that also assists hospitals and other organizations.
When Did the Incident Occur?
DMC detected unauthorized access to its internal network on May 22, 2025. The forensic investigation found that certain files may have been viewed or acquired between May 19 and May 22, 2025; the document review used to identify affected people was completed on September 25, 2025.
What Information Was Affected?
The information varied by person and may have included names, addresses, dates of birth, Social Security numbers, medical treatment or health-history information, and health-insurance information.
How Did the Firm Respond?
DMC said it investigated with external cybersecurity professionals, reviewed its security and privacy practices, and offered eligible notice recipients 12 months of credit monitoring and fraud assistance.
What Should Affected People Do?
Notice recipients should review credit reports, financial-account activity, health-insurance explanations of benefits, and medical-service records for activity they do not recognize. Suspicious activity should be verified through the relevant organization's official contact channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
