In a significant legal development, a class action lawsuit has been filed against a prominent international law firm for allegedly failing to protect sensitive personal information. On November 20, 2025, Martin Chavira-Hernandez filed the complaint in the United States District Court for the Southern District of New York against Pillsbury Winthrop Shaw Pittman LLP. The lawsuit claims that the firm did not adequately secure personally identifiable information (PII), leading to a data breach that exposed sensitive data such as Social Security numbers and financial account details.
The case revolves around an incident that occurred in late April 2025 when cybercriminals reportedly infiltrated Pillsbury’s computer systems. This breach resulted in unauthorized access to firm documents and sensitive client information. According to the complaint, this failure on Pillsbury’s part has caused and will continue to cause significant harm to those affected, including financial costs associated with identity theft prevention and emotional distress. Chavira-Hernandez, who is not directly affiliated with Pillsbury nor aware of how his data was compromised, received notification of the breach on November 4, 2025.
Chavira-Hernandez argues that despite being careful with his private information—storing it securely and avoiding unencrypted transmission—his data was still compromised due to Pillsbury’s inadequate security measures. The lawsuit alleges negligence and breach of implied contract by Pillsbury for not safeguarding the PII entrusted to them. It also accuses the firm of violating industry standards and Federal Trade Commission guidelines by failing to implement reasonable data security practices.
The plaintiffs are seeking various forms of relief from the court, including compensatory damages for the invasion of privacy and other harms suffered due to the breach. They also demand injunctive relief requiring Pillsbury to enhance its data security systems and provide lifetime credit monitoring services for those affected by the breach.
Representing Chavira-Hernandez are attorneys from different law firms specializing in class action lawsuits related to data breaches. The case is presided over by judges at the Southern District Court under Case ID 25-9684.
Source: 125cv09684_Martin_Chavira_v_Pillsburyr_Complaint_Southern_District_of_New_York.pdf
