Shepherd Smith Edwards and Kantas LLP data breach investigation

Investigation notes

Shepherd Smith Edwards and Kantas LLP operates as a prominent legal services firm, specializing in complex litigation, securities arbitration, and investor advocacy. Because of the nature of their practice, the firm routinely collects, processes, and stores an extensive volume of highly sensitive documents and personal identifiable information. Clients seeking representation in financial disputes must disclose complete financial histories, investment account details, tax records, and personal identification numbers. Consequently, the firm maintains a vast digital repository containing some of the most confidential and lucrative data targeted by cybercriminals. In 2025, Shepherd Smith Edwards and Kantas LLP reported a significant data security incident to the Nebraska Attorney General. While exact technical details continue to emerge, security incidents impacting legal institutions typically involve sophisticated cyberattacks such as ransomware deployments, unauthorized network intrusions, or third-party vendor compromises. Law firms are prime targets for malicious actors seeking to intercept confidential communications, intellectual property, and client financial records. An intrusion of this magnitude indicates that unauthorized parties may have successfully bypassed network perimeters, gaining deep access to internal file servers and client management systems. The exposure resulting from this breach implicates highly sensitive data categories, each carrying severe risks for affected individuals. Compromised data typically includes full legal names, Social Security numbers, date of birth, financial account details, and confidential correspondence detailing sensitive legal and financial disputes. When Social Security numbers and financial account details are leaked, victims face an immediate and lifelong risk of identity theft, unauthorized credit openings, and financial account takeover. Furthermore, because legal files often contain deeply personal litigation details and tax records, victims are uniquely vulnerable to targeted phishing scams, extortion attempts, and fraudulent tax filings. As a professional legal services provider entrusted with sensitive client records, Shepherd Smith Edwards and Kantas LLP had strict legal and ethical obligations to safeguard this information. Under state data protection laws and common law principles of professional responsibility, the firm was required to implement robust administrative, physical, and technical safeguards—including advanced encryption, multi-factor authentication, and regular vulnerability assessments—to prevent unauthorized access. The occurrence of a data breach strongly suggests a potential failure in these security protocols, raising serious questions about whether the firm maintained adequate defenses to protect its clients' most private information. If you received a data breach notification letter from Shepherd Smith Edwards and Kantas LLP, it serves as a formal admission that your private information was compromised due to the firm's security failures. Under the law, receiving this letter establishes your legal standing to participate in a class action lawsuit against the firm. You do not need to prove that you have already suffered financial loss or identity theft to seek legal recourse; the increased risk of future harm is sufficient. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.