Sheppard Mullin’s Document Disclosure
Sheppard Mullin’s 2 October notice describes an attorney deceived into disclosing documents to an unknown third party on 31 August 2026, without systems or network compromise.
The Texas attorney general’s 6 October entry lists 2,326 residents, with Social Security, driving-licence, government-ID and Other categories. These are report-level categories, not a personalised inventory or a national total.
The letter and register answer different questions
Discovery was on 1 September. The public sample redacts the recipient’s fields, reports no fraud evidence at notice time, and separately identifies around 29 potentially affected Rhode Island residents. That does not rule out later misuse.
A useful way to read a notification is to separate the evidence from the task. Keep the document’s wording in one column of your own notes and your unanswered questions in another. That stops an assumption becoming part of the record simply because it was repeated in a later conversation.
Verify the offer before entering information
Recipients were offered 24 months of TransUnion/Cyberscout protection, with enrolment required by 31 December 2026. Services may not be available to under-18s.
Obtain the firm’s contact details separately from an incoming message, then confirm the notice and any eligibility question. Retain a dated copy and note how you reached the firm. A forwarded letter or matching surname is not a reason to use another person’s code: have your own notification confirmed first.
For U.S. readers, a credit freeze at all three bureaus restricts new-credit access, while monitoring alerts you to changes. Review statements and report unfamiliar activity. These measures do not retrieve disclosed files or cancel an identity document.
Record the action, not just the invitation
For example, after confirming a monitoring offer, retain the activation confirmation rather than merely filing the invitation. For an issuer’s requested action, record the owner, completion date and response reference. Put unresolved questions back to the verified contact. This is a suggested follow-through method, not a report of additional misuse.
BlackTree’s analysis of other law-firm disclosures explains why one trusted user can expose consequential documents. Those are separate incidents, not evidence of a common attacker or technique. A narrow technical footprint should not be mistaken for a trivial outcome.
Sources: the California attorney general’s SB24-630779 filing and sample individual notice; and the Texas attorney general’s Data Security Breach Reports register.
Updated 15 October 2026: expanded reader guidance and clarified offer conditions.
