All Breaches
September 1, 2025 Verified Sensitive Record Technology

DocketWise Data Breach

The 2025 DocketWise data breach affected 116,708 people according to the Indiana Attorney General's record. The official notice says an unauthorized actor used valid credentials to clone certain repositories belonging to a third-party partner.

116.7 Thousand
Affected People
5
Data Types
High
Severity
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5
  • Names
  • Physical addresses
  • Social security numbers
  • Government issued identification numbers
  • Passport numbers

About This Breach

DocketWise is a case and immigration-process management platform designed especially for immigration attorneys. Some affected repositories were used in a data-migration pipeline and contained unstructured records about clients of the company's law-firm customers.

How Did the Incident Occur?

The Indiana record lists September 1, 2025, as the incident date. In October 2025, DocketWise determined that credentials for one of its third-party partner environments may have been accessed. The forensic investigation confirmed that an unauthorized actor used valid credentials to clone certain repositories. When the investigation was completed, there was no evidence of ongoing unauthorized activity.

What Information Was Affected?

The information varied by person. The official notice identifies names, mailing addresses, Social Security numbers, government identification numbers, and passport numbers. The information had been provided to DocketWise by its law-firm customers, and the notice does not indicate that every information type applied to every person.

How Did DocketWise Respond?

The company investigated and remediated the incident with outside cybersecurity specialists, implemented additional security measures, reviewed its existing policies, and notified the Federal Bureau of Investigation. It coordinated notifications with affected law firms and offered individuals 24 months of complimentary credit monitoring and identity-restoration services. At the time of the notice, DocketWise was unaware of any fraudulent use of the personal information.

What Should Affected People Do?

Notice recipients should check their letters for the monitoring-service enrollment deadline and review credit reports, financial accounts, and unexpected activity connected to identity documents. People whose Social Security, passport, or other identification numbers were involved may consider a fraud alert or credit freeze based on their circumstances and should verify unexpected messages about immigration files through their law firms.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information