U.S. law firm Orrick, Herrington & Sutcliffe has agreed to pay $8 million to settle class action claims from people who said their personal information was compromised in a breach of some of the firm's client data, according to a proposed settlement, opens new tab filed Thursday in San Francisco federal court.
Hackers accessed the names, addresses, dates of birth, and Social Security numbers of more than 600,000 people that were contained in files held by Orrick, the plaintiffs said, opens new tab. Orrick detected the data breach in March 2023.
Plaintiffs alleged Orrick did not inform them of the data breach until late June last year. Thursday's court papers said that "by January 2024, Orrick had sent notice letters to impacted individuals consistent with its data breach notification obligations."