Sheppard Mullin Files Data Breach Notice with Oregon Regulators
Sheppard, Mullin, Richter & Hampton LLP has officially filed a data breach notification with Oregon authorities. The firm reported a security incident that occurred on August 31, 2026, which may have exposed personal information. Affected individuals should carefully review any direct notifications from the firm for specific details and recommended actions.
- State
- Oregon
- Breach date
- August 31, 2026
- Reported
- October 2, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Home Address
- Driver's License or Government ID Number
- Financial Account Details
- Tax Return and Compensation Information
- Confidential Legal and Personal Records
Sheppard, Mullin, Richter & Hampton LLP has submitted a data breach notification to state regulators in Oregon. This filing publicly acknowledges a data security incident involving personal information under the firm's care. The official report date for this incident was October 2, 2026.
According to the filing, the data security incident at Sheppard, Mullin, Richter & Hampton LLP occurred on August 31, 2026. The nature of the breach itself was not specified in the public record. Details regarding how the compromise occurred were not immediately available in the initial notification.
While the specific categories of data involved were not detailed in the public notice, the filing indicates that personal information may have been exposed. Individuals potentially impacted by this event should refer to any direct communications received from Sheppard, Mullin, Richter & Hampton LLP for precise information about their data.
The investigation into this incident is currently listed as "monitoring." For individuals concerned about their data, it is generally recommended to remain vigilant for any unusual activity across their online accounts. This includes regularly reviewing financial statements and credit reports for discrepancies.
As a general precaution after any data security incident, consider changing passwords for important online services, especially if you reuse them. Be cautious of unsolicited communications, such as emails or phone calls, that request personal details. Always verify the legitimacy of such requests directly with the organization.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Oregon Attorney General filing
Related data breach cases
- AllCare Health, Inc.
- Hood River Dental
- PeaceHealth Sacred Heart Medical Center
- iRhythm Technologies Inc.
- Midvale Indemnity Company
- Poppins Payroll Company
- Lamb Weston Holdings, Inc.
- City of McMinnville
- Upbound Group, Inc.
- OneMain Financial
- MedImpact Healthcare Systems, Inc.
- Call-On-Doc, Inc.
- Ridgeway Pharmacy Ltd
- IDScan.net