Greenberg Traurig breach litigation turns security controls into liability evidence

On September 21, Reuters reported that Greenberg Traurig faced two proposed federal class actions after disclosures that an unauthorized actor accessed a limited number of documents containing personal information, including Social Security numbers; the firm said its systems were not compromised and that it continued operating without disruption. The complaints allege inadequate protection of sensitive information, but those allegations have not been adjudicated. For mid-sized firms, the cases show that incident response will be assessed through retained data, access pathways, client notification and the evidence available to explain what was and was not compromised. AI procurement should therefore sit inside the same security and information-governance process as the DMS, identity controls and data-loss monitoring, rather than operate as a separate innovation review.