DocketWise was the subject of a data breach notification filed with the CA Attorney General. The AG filing was recorded on May 1, 2026.
Data Exposed
DocketWise was the subject of a data breach notification filed with the CA Attorney General. The AG filing was recorded on May 1, 2026.
DocketWise operates as a specialized legal technology platform and practice management software provider explicitly designed for immigration law firms and attorneys. The company's digital ecosystem stores extensive repositories of confidential information, including complex client questionnaires, biographical details, immigration case histories, and sensitive legal documentation required for visa, green card, and naturalization petitions. Because immigration law practices must manage intricate personal histories, family lineage records, and cross-border communications, DocketWise functions as a central repository for vast quantities of high-risk, sensitive data belonging to individuals navigating the United States immigration system. In 2026, DocketWise reported a significant security incident to the California Attorney General, alerting users and regulatory authorities to an unauthorized compromise of its digital infrastructure. In the context of legal technology platforms and cloud-based software providers, incidents of this nature typically involve sophisticated cyberattacks, unauthorized database access, or vulnerabilities exploited within third-party integrations and server environments. When legal software vendors suffer network intrusions, threat actors often gain deep, unrestricted access to underlying cloud databases where user accounts and client files are persistently stored. The exposure resulting from the DocketWise security incident potentially encompasses a wide array of sensitive categories, including full legal names, dates of birth, Social Security numbers, passport details, alien registration numbers (A-numbers), employment histories, and detailed financial declarations submitted for immigration sponsorship. The exposure of this specific data creates severe, compounding harms for affected individuals. Compromised identification numbers and immigration records leave victims highly vulnerable to targeted identity theft, financial fraud, and sophisticated phishing scams that prey on individuals' immigration statuses. Furthermore, because immigration files often contain intimate personal history and government documentation, the breach threatens the fundamental privacy and physical safety of vulnerable applicants. As a technology provider handling confidential client and legal data, DocketWise is bound by stringent legal and regulatory obligations to maintain robust cybersecurity measures. Under California data protection standards, including the California Consumer Privacy Act (CCPA) and state common law duties, companies that collect and store sensitive personal information must implement reasonable security procedures and practices appropriate to the nature of the information. The occurrence of a data breach of this scale strongly indicates potential failures in encryption protocols, access controls, network monitoring, or vulnerability management, representing a failure to adequately protect sensitive legal data from foreseeable cyber threats. Receiving an official data breach notification letter from DocketWise serves as formal confirmation that your personal and potentially confidential immigration or legal information was compromised due to inadequate corporate cybersecurity. Legally, this notification establishes your standing to participate in a class action lawsuit aimed at holding the company accountable for failing to safeguard your sensitive records. Affected individuals do not need to wait for fraudulent transactions or identity theft to occur before taking legal action. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Based on the data types reported, affected individuals face:
Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.
Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.
What the California Consumer Privacy Act (CCPA) and federal statutes entitle you to recover:
The hours spent responding to a data breach — canceling accounts, contacting credit bureaus, updating passwords, and investigating fraud — represent compensable economic harm in data breach litigation.
Once your SSN is exposed, protection becomes an ongoing expense. Plaintiffs in data breach settlements have recovered costs for credit freezes, identity protection subscriptions, and time spent dealing with fraudulent accounts — sometimes covering multiple years of exposure.
Fees charged to close and reopen accounts, issue replacement cards, or dispute fraudulent transactions are recoverable in data breach litigation. So are the costs of overdrafts, late payments, and credit damage caused by unauthorized activity.
When login credentials are exposed, the costs of downstream account compromises — password managers, security audits, and recovery costs for hijacked downstream accounts — can be recovered. Courts in recent class actions have awarded damages for credential exposure even without proven misuse.
Data breach victims regularly report anxiety, loss of sleep, and ongoing fear of identity theft. These non-economic harms are cognizable injuries in data breach litigation, particularly in cases involving SSN or medical record exposure.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
No. Under California Consumer Privacy Act (CCPA) and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.
Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from DocketWise does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Not necessarily. Many data breach victims are never notified directly. If your personal information was held by DocketWise during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.
Received a notification letter from DocketWise?
What it means and what to do next.
DocketWise breach?
Free case review · No fee unless you win