Berger & Williams Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / Berger & Williams
Active investigation Data breach · Law Firm Notices mailed May 5, 2026

Received a May 2026 breach notice from Berger & Williams?

Dapeer Law, P.A. is investigating a potential class action against Berger & Williams, LLP, a San Diego labor and employment law firm, on behalf of clients and staff whose personal information may have been exposed in the February 2025 employee email account compromise.

Submit your claim See what to do No fee unless we recover for you
Breach window
February 6, 2025
Unauthorized email account access
Notification delay
~14 months
Intrusion Feb 2025, discovered Apr 2026
Credit monitoring
12 months
Cyberscout (TransUnion), single bureau
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from Berger & Williams dated May 2026.
  • Your letter offered enrollment in 12 months of free Cyberscout (a TransUnion company) Single-Bureau Credit Monitoring and fraud-resolution assistance.
  • You had personal or employment-related information held by the firm in its capacity as a labor and employment law firm or as your employer.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility
Background

What happened

On April 6, 2026, Berger & Williams, LLP ("Berger & Williams"), a labor and employment law firm headquartered at 401 B Street, Suite 2000 in San Diego, California, discovered during a cybersecurity investigation that an unauthorized outside actor had accessed an employee email account on or about February 6, 2025, approximately 14 months earlier. According to the notice filed with the Maine Attorney General on May 5, 2026, the impacted mailbox contained personal information for individuals affiliated with the firm.

Berger & Williams reports that it immediately launched a technical investigation with outside cybersecurity professionals and completed an extensive manual review of the email account contents to determine what data was accessible. The firm's notice describes the exposed data only as "a limited amount of personal information," without itemizing specific categories in the public filing. Affected individuals are being offered 12 months of complimentary Single-Bureau Credit Monitoring and fraud-resolution assistance through Cyberscout, a TransUnion company. As of the notification date, Berger & Williams reported no evidence of misuse of the information.

Because labor and employment law firms routinely hold sensitive client and employee records, including Social Security numbers, payroll and wage data, medical leave and disability information, severance and EEOC matter records, and tax identification numbers, the categories of information potentially exposed in this incident, as well as how an intrusion went undetected for roughly 14 months, are among the issues being evaluated.

Law firm breach Email account compromise Delayed detection California Maine AG filing
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your letter contains the enrollment code for credit monitoring and is important evidence if you decide to participate in a lawsuit.

2

Enroll in the free 12-month credit monitoring

Enroll in the Cyberscout (TransUnion) Single-Bureau Credit Monitoring and fraud-resolution services offered in your letter before the deadline stated in the notice. Accepting this benefit does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. For law firm and employment-related cases, also watch for unauthorized changes to financial accounts, unexpected tax filings under your Social Security number, and any unfamiliar communications referencing legal matters in which you were involved.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options under California and other state breach-notification and consumer-protection laws, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim
Timeline

Breach timeline

On or about February 6, 2025 Passed
Unauthorized access to Berger & Williams employee email account
April 6, 2026 Passed
Intrusion discovered during cybersecurity investigation
April to May 2026 Passed
Forensic investigation and manual review of email account contents
May 5, 2026 Passed
Notice filed with Maine AG, letters mailed to affected individuals
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. The roughly 14-month gap between the unauthorized access and the firm's discovery of the intrusion is among the procedural issues being evaluated. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, employment-related identity theft, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring Berger & Williams to implement stronger email security, monitoring, and data retention practices going forward.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from Berger & Williams. What should I do? +

Keep the letter, enroll in the free 12-month Cyberscout (TransUnion) Single-Bureau Credit Monitoring and fraud-resolution services before the deadline printed on your notice, place a fraud alert or security freeze on your credit file, monitor your bank, credit card, and tax accounts for unfamiliar activity, and contact a data breach attorney for a free consultation. Accepting credit monitoring does not waive your right to sue.

Am I eligible to join a class action against Berger & Williams? +

If you received a May 2026 data breach notice from Berger & Williams, LLP, you are likely eligible for a free case evaluation. Eligibility depends on your state of residence, the categories of your data that were exposed, and any losses you have suffered. Dapeer Law will review your notice at no cost.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

The firm's public notice describes only "a limited amount of personal information" affiliated with Berger & Williams, without listing the specific data fields. Because labor and employment firms typically hold Social Security numbers, payroll and wage data, medical and disability information, and tax identifiers, the categories involved may be sensitive. Check your individual notice letter for the precise data elements identified for you.

Did Berger & Williams offer free credit monitoring? +

Yes. Berger & Williams is providing 12 months of complimentary Single-Bureau Credit Monitoring and fraud-resolution assistance through Cyberscout, a TransUnion company. Recipients can activate the services using the enrollment code printed in the notice before the deadline stated in the letter. Enrollment is separate from, and does not waive, your right to pursue a claim.

How many people were affected by the Berger & Williams breach? +

The total number of affected individuals was not disclosed in the May 5, 2026 filing with the Maine Attorney General. This page will be updated as additional information becomes available.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

The notice filed with the Maine Attorney General is available through the Maine AG's public data breach portal (linked in Sources below). If you received a letter but no longer have it, Dapeer Law can assist you in obtaining a copy during your free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with Berger & Williams, LLP, Cyberscout, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with Maine Attorney General on May 5, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Previous
Previous

D'Ambrosio Dodge Data Breach Class Action Investigation (May 2026 Notices)

Next
Next

Humana Data Breach Lawsuit Investigation (April 2026)