GrayRobinson P.A., a Florida-based law firm, notified the California Attorney General’s office of a data breach on May 4, 2026. The official notification letter was filed as a scanned document, and no readable text could be extracted from it. That means we cannot currently confirm exactly what happened, how the incident occurred, or whether it involved hacking, a phishing attack, a lost device, or some other cause. We’re publishing this article to record that a filing exists and to give people who may have received a letter from GrayRobinson P.A. some general guidance while more details become available.
Because the scope details in the filing aren’t currently readable, we cannot confirm exactly who is affected or how many people received notice. If you received a letter directly from GrayRobinson P.A., that letter is the most reliable source of information about whether your data was involved and what specifically was exposed.
What information was exposed?
- The specific types of personal information involved were not disclosed in the portion of the filing we could read.
- Law firms typically hold sensitive information such as names, Social Security numbers, financial account details, and case-related personal or legal information, so it’s reasonable to treat this notice seriously even without confirmed specifics.
- We will update this article if a readable version of the notification becomes available.
What should you do now?
- Read your notification letter from GrayRobinson P.A. carefully, since it should list exactly what information of yours was involved.
- Watch your bank and credit card statements closely for any unfamiliar charges over the coming months.
- Check your credit reports for accounts you don’t recognize, and consider placing a free fraud alert or credit freeze with the major credit bureaus if you handled sensitive legal or financial matters with this firm.
- Be cautious of unexpected calls, emails, or texts claiming to be from GrayRobinson P.A. or related parties, especially any asking you to verify personal details or click a link.
- Since law firm records often involve sensitive personal and case information, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- Keep a copy of your notification letter in case you need it later to dispute fraudulent activity or file a report.