Skip to content

IPRO Customer Database Allegedly Leaked, 60,454 Records From Legal eDiscovery Platform Published

Breach Report United States flagUnited States Legal Technology / eDiscovery Free Download

IPRO Customer Database Allegedly Leaked, 60,454 Records From Legal eDiscovery Platform Published

A forum user posting as cozypandas has published what they describe as the full customer database of IPRO, an eDiscovery platform used by law firms, corporations, and government agencies to manage data for litigation. The post claims 60,454 records containing names, addresses, NetSuite and Salesforce identifiers, and internal account data, and asserts that US Department of Justice agencies are among the accounts represented. The release is credited to three handles and offered as a free download. In the same post the actor advertises separate services including the forgery of court orders and the submission of fraudulent emergency disclosure requests, which materially changes how this release should be read. The claim is unverified.

Records60,454
PriceFree
CountryUnited States flagUnited States
Actorcozypandas

Post details

TargetIPRO
CountryUnited States flagUnited States
SectorLegal technology / eDiscovery
ListingFree direct download
Records60,454 claimed
DataCustomer & account records
Observed
CreditedThree handles

!Allegedly included

  • Customer names
  • Addresses
  • NetSuite identifiers
  • Salesforce identifiers
  • Internal account data
  • Law firm accounts
  • Corporate accounts
  • Government agency accounts
  • DoJ agencies (claimed)

Screenshot

Potential impact

What is described is the vendor's customer and account database, not the legal material held inside the platform. Nothing indicates access to case files or privileged communications. The data would instead map which law firms, corporations, and government bodies use the platform, and how their accounts are structured. The services advertised alongside it are what elevate this: the same actor offers forged court orders and fraudulent emergency disclosure requests, a technique that works because platforms trust the requester's identity rather than a judge. A list of genuine government legal accounts is directly complementary to that. The claim is unverified.

iStatus

Unverified

The post contains no sample records and no proof material, only a description and a hosted download, which Dark Web Informer is not reproducing along with the contact routes for the advertised services. The account holds minimal standing, though three handles are credited. The Department of Justice claim is uncorroborated and is the element most likely inflated. The claim is unverified and IPRO has not publicly addressed it.

Want everything on this breach? Paid subscribers get the full claim details and more. Check out the threat feed, then after subscribing, search there for this alert. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest