Goodwin says vendor breach may have exposed client data (updated)

Sara Merken reports:

Goodwin Procter experienced an indirect security breach involving a third-party vendor whose services the firm uses for large file transfers, according to an internal memo reviewed by Reuters on Tuesday.

Goodwin’s investigation into the matter, which is still ongoing, revealed a “small percentage of our clients may have experienced unauthorized access to or acquisition of confidential information” on Jan. 20, Goodwin managing partner Mark Bettencourt said in the memo.

Read more from Reuters on WestLaw.

In January, Accellion notified the state of Washington about a breach.  Is the Accellion incident responsible for the Goodwin Procter report? It’s unknown because Goodwin Procter did not name their vendor.

Update:  My hunch was correct.  This was the Accellion breach that impacted this law firm — and other law firms, it seems.