M&Y Personal Injury Lawyers notified the California Attorney General of a data breach involving archived client records. On November 25, 2025, the firm identified suspicious activity on a server used for historical record keeping. Investigation revealed that an unknown actor viewed and downloaded files on or about November 23, 2025. Affected data may include names, Social Security numbers, financial account information, driver's license numbers, dates of birth, health insurance information, and medical information. The firm terminated server access, reported the incident to federal law enforcement, and is offering credit monitoring and identity restoration services to affected individuals.