Docketwise docketwise.com Docketwise data breach: what happened and what to do
In October 2025 Docketwise, an immigration case management platform, suspected its partner repository credentials had been accessed. It later confirmed an unauthorized actor cloned repositories containing law firm records. Notices went out April 3, 2026.
View all 13,115 breaches- Breach date
- Oct 2025
- Made public
- 3 Apr 2026
- Last updated
Docketwise is a case management platform used by immigration attorneys. In a notice dated April 3, 2026, filed with the California attorney general, the company said an unauthorized actor had accessed personal information that law firm clients had stored in its application.
What happened
According to the notice, Docketwise suspected in October 2025 that credentials to one of its third-party partner repositories may have been accessed. A forensic investigation with outside cybersecurity experts later confirmed that an unauthorized actor used valid credentials to clone certain partner repositories. Some were used in a data migration pipeline for the Docketwise application, which held law firm records containing personal information.
Docketwise said there is no evidence of ongoing unauthorized activity and that it notified the FBI. It also said it has no evidence the incident was intended to target immigration firms or that personal information has been published.
What was exposed
The notice says the information varies from person to person and starts with your name. The letter template filed with California doesn't list the other data types, so your own letter is the place to see what applies to you. Because the records come from immigration cases, people should treat IDs and immigration paperwork as potentially involved until their letter says otherwise.
What Docketwise is offering
People who received the notice are offered two years of free credit monitoring and identity restoration through IDX, with an enrollment deadline of July 3, 2026. The notice includes a dedicated assistance line and standard guidance on credit reports and security freezes.
If you were a client of an immigration law firm that uses Docketwise, look for the letter and check the deadline. The credit freeze steps below work whether or not you enroll.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze stops anyone from opening new credit in your name. It's free and takes about 10 minutes each at Equifax, Experian and TransUnion. You can lift it temporarily when you apply for credit yourself.
- 2
Enroll in the offered monitoring if you can
Docketwise's letter offers 2 years of credit monitoring and identity restoration through IDX. The enrollment deadline in the letter was July 3, 2026, so call the number in your letter if you're past it.
- 3
Expect phishing about your case
Messages claiming to be from your lawyer, USCIS or a government office about a deadline or fee are a common scam. Confirm with your law firm using a number you already have.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus monitors breach databases and the dark web and alerts you when your data turns up, but it can't remove data that's already in a breach, so the alerts tell you what to change.
Frequently asked
Was I affected by the Docketwise breach?
Docketwise sent notices to the people whose information was involved. The company received that information through immigration law firms, so a letter from Docketwise is the sign.
What was exposed?
The notice says the data varies by person and includes your name. Your letter lists the other types that apply to you.
Has the data been published?
Docketwise said it has no evidence that personal information has been published.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
