Greenberg Traurig breach litigation raises the evidentiary bar for client-data assurance

On September 21, Reuters reported that Greenberg Traurig faced two proposed class actions after an August incident exposed personal information including names, contact details, dates of birth and Social Security numbers. The firm said its systems were not compromised, that an unauthorized actor accessed a limited number of documents and that a small number of clients were notified; the plaintiffs’ allegations have not been adjudicated. For client teams, security questionnaires and panel responses increasingly require evidence at the document, user and incident-response levels rather than broad statements about firm systems. BD, information security and relationship partners should align on what can be substantiated before an incident, because discrepancies between technical scope and client-facing language can deepen trust damage.