Two data security incidents affected immigration law firms and their clients

**Executive Summary:** DocketWise disclosed a breach in which valid credentials to a third-party partner were used to clone repositories containing unstructured law-firm client data (including SSNs, passport/driver’s license numbers, financial and medical information), affecting 116,666 people; a separate misconfigured S3 bucket exposed ~111,000 files for another immigration firm. No ransom demand or public posting has been reported, but the sensitivity of the data creates substantial risk to affected individuals, especially immigration clients.