I broke the story originally over on my blog (http://www.mytruston.com/blog/data_breach/huge_law_firms_records_handed_over_to_go.html). And I would like to point out that it isn’t easy for companies to opt-out. Because the law firm was defunct for 3 years before the notices went out. So many of their former clients have moved, been acquired or gone otu of business. But that doesn’t make those records any less sensitive. If a document has my name, social security number, and address on it it doesn’t matter how old it is, my identity could be stolen. Brobeck handled 5-6 individual stock offerings for my little company alone. And the offering docs had every investors sensitive data in it.