Perkins Law Data Breach Notice (Oregon Attorney General)

The Perkins Law data breach notice means that personal information belonging to 753 people is now outside the firm’s control. The filing, submitted to the Oregon Department of Justice on January 22, 2025, states the incident occurred on October 09, 2024 — an interval of 105 days.

What the 105-Day Gap Actually Means for You

That three-and-a-half-month period between the breach date and the official filing is the single most concrete fact in the record. Regulators require organisations to investigate before notifying, so the gap does not automatically prove wrongdoing. It does, however, mean the exposed records had more than three months to circulate before anyone outside Perkins Law was told. If your information was included, it has already had time to reach parties who may intend to use it.

The Only Category Named in the Filing

The Oregon Attorney General’s record lists only one category: personal information. No passwords, no financial account numbers, no Social Security numbers, and no government identifiers appear in the disclosed fields. This is genuine good news. The absence of those high-value identifiers sharply limits what criminals can do with the data compared with most breaches of this size.

Because the filing uses the broad term “personal information,” the exact details sent to each of the 753 affected individuals will only be known when — or if — Perkins Law mails them a letter. The organisation is required by law to notify affected Oregon residents directly, usually by post. If you have not received such a letter at your last known address, it is likely your records were not part of this incident. Anyone who has moved since October 09, 2024 should contact Perkins Law directly to confirm whether their file was involved.

What Criminals Can Still Do With Names, Addresses, and Case Details

Even without Social Security numbers, the combination of name, address, and case-related information retains long-term value. Fraudsters can use it to build convincing profiles for imposter scams, to tailor phishing emails that reference your legal matter, or to support synthetic identity applications when paired with data stolen elsewhere. Once personal details leave a law firm, they cannot be recalled. The exposure is permanent even if the precise records cannot be changed like a password.

Why This Exposure Matters More for Legal Clients

Legal records frequently contain sensitive context about divorces, financial disputes, criminal matters, or business conflicts. When that context travels with your name and address, it gives a scammer a powerful script. A caller who already knows details of your divorce or lawsuit sounds far more credible. This is the realistic risk created by the categories Perkins Law has now disclosed.

How to Check Whether You Were Affected

The only reliable way to know is the letter Perkins Law is required to send. Absence of a letter at your address from the time of the October 09, 2024 incident usually means you were not in the group of 753. If you have changed address since then, reach out to the firm to ask. Do not rely on online portals or general announcements; the law ties notification to the individual record.

Practical Steps That Address This Specific Exposure

• Monitor your mail for a letter from Perkins Law. This remains the definitive signal that your file was included.
• Place a fraud alert with the three major credit bureaus. Even without a Social Security number exposed, a fraud alert forces lenders to verify your identity before opening new accounts in your name.
• Review your credit reports every four months. Rotate which bureau you check so you see fresh data regularly; look for accounts or inquiries you do not recognise.
• Treat any unsolicited contact referencing your legal matter as suspicious. Hang up or delete and call the firm directly using a number you already know to be genuine.
• Be wary of documents that appear to come from Perkins Law. Verify any request for additional personal details by contacting the firm through its official channels before responding.

The record contains no information about how the breach occurred, whether data was copied or simply viewed, or how long any unauthorised access lasted. Those details remain unknown to the public. What is known is narrow but clear: personal information for 753 individuals left Perkins Law’s systems on or around October 09, 2024, and the firm waited until January 22, 2025 to file the notice.

Focus on the parts you can still control. The letter is the test. The fraud alert is the fastest practical defence. The exposure cannot be undone, but its practical harm can still be limited.