{"id":17996,"date":"2026-02-20T19:47:17","date_gmt":"2026-02-21T02:47:17","guid":{"rendered":"https:\/\/www.timenetlaw.com\/db\/?p=17996"},"modified":"2026-04-07T20:21:29","modified_gmt":"2026-04-08T03:21:29","slug":"law-firm-data-for-sale-saas-data-brokers","status":"publish","type":"post","link":"https:\/\/www.timenetlaw.com\/db\/law-firm-data-for-sale-saas-data-brokers\/","title":{"rendered":"Your Law Firm’s Data Is For Sale. Here’s the Proof."},"content":{"rendered":"

Every now and then, my wife helps me clear out my spam-riddled email inboxes. The ones overflowing with pitches from law firm data brokers<\/strong>. It’s something she enjoys doing (bless her, I can’t stand it), and sometimes she finds something important. Today, she did it again.<\/p>\n

While sweeping up the mess inside my email, she mentioned something she’s said many times before. “You got another one of these!” She showed me. A familiar template of an email I get constantly. I almost always just junk them. Sometimes I send a frustrated reply. But I never think twice about them.<\/p>\n

Until today. Today, I decided to investigate just how deep the law firm data broker<\/strong> problem really goes.<\/p>\n

Because every week \u2014 sometimes every day \u2014 I get emails like this:<\/p>\n

\n

\n“Hi, I hope this message finds you well. My name is Dorothy Gale, and I have some suggestions that could quickly boost your email marketing efforts. Would you be interested in purchasing a verified list of Legal Practice Management Software Users?”\n<\/p>\n<\/blockquote>\n

\n\"Email
One of over 2,218 data broker emails received since 2017. Names and personal details from all major cloud legal platforms, for sale to anyone.<\/figcaption><\/figure>\n

The sender is using a fake name from an Outlook burner account. The email lists every major cloud-based legal software platform by name: Clio, Smokeball, MyCase, PracticePanther, and a dozen others, and offers to sell their users’ personal data: I’m talking names, direct emails, phone numbers, mailing addresses, firm revenue, salaries, decision makers, employee counts, and more.<\/p>\n

This isn’t a one-off. I’ve received over 2,218 of these emails since 2017.<\/strong> And the number grows every single year.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
Year<\/th>\nBroker Emails Received<\/th>\n<\/tr>\n<\/thead>\n
2019<\/td>\n143<\/td>\n<\/tr>\n
2020<\/td>\n217<\/td>\n<\/tr>\n
2021<\/td>\n262<\/td>\n<\/tr>\n
2022<\/td>\n297<\/td>\n<\/tr>\n
2023<\/td>\n384<\/td>\n<\/tr>\n
2024<\/td>\n416<\/td>\n<\/tr>\n
2025<\/td>\n461<\/strong><\/td>\n<\/tr>\n
2026<\/td>\n38 (first 7 weeks)<\/em><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\"Chart
Data broker emails received per year. The number has never gone down. Not once. Not a single year.<\/figcaption><\/figure>\n

That’s a 222% increase<\/strong> from 2019 to 2025. It has never gone down. Not once. Not a single year.<\/p>\n

And when I say “data brokers,” I don’t mean one bad actor. A forensic analysis of just 118 of these emails revealed 57 unique senders operating from 24 different domains.<\/strong> Half use Outlook burner accounts (disposable, untraceable identities). Many trace back to IP addresses in India, Korea, Japan. But some even from the US. They operate openly, offering “verified lists” of lawyers like it’s a perfectly normal business.<\/p>\n

\n\"Pie
Where the data brokers hide: 50% use Outlook burner accounts. Analysis based on a sample of 118 emails from a total of 2,218+ received since 2017.<\/figcaption><\/figure>\n

Because for them, it is.<\/p>\n

These emails aren’t new, either. The earliest one I can find dates back to 2017<\/strong>:<\/p>\n

\n\"2017
The earliest evidence: a data broker email from 2017, already offering to sell legal software user lists. This has been going on for nearly a decade.<\/figcaption><\/figure>\n

And they don’t take “no” for an answer. Here’s a follow-up from 2018, pressuring for a response:<\/p>\n

\n\"Aggressive
A 2018 follow-up email from a different broker. They don’t stop.<\/figcaption><\/figure>\n
\n

What Are Law Firm Data Brokers Selling, and Who’s Buying?<\/h2>\n

Let’s be clear about what these brokers are offering. This is directly from their emails:<\/p>\n

\n

\n“The data fields include: Company Name, Contact First & Last Name, Job Title, Direct Email Address, Phone Number, Fax Number, Mailing Address, Employee Count, Revenue Size, Industry Classification, and Website URL.”\n<\/p>\n<\/blockquote>\n

That’s not aggregated, anonymized market research. That’s your name, your direct phone number, your firm’s revenue, and your office address<\/strong>, all packaged and sold to anyone with a credit card.<\/p>\n

These emails are highly personalized. The brokers know exactly who they’re targeting: using your name, your firm’s name, and even referencing your specific software:<\/p>\n

\n\"Data
Personalized targeting: this broker knows the recipient’s name and company. They’re not guessing, they have the data.<\/figcaption><\/figure>\n

They’re also shamelessly opportunistic. When AffiniPay acquired MyCase and LawPay, brokers immediately used the M&A news as a hook to sell user lists:<\/p>\n

\n\"Email
M&A ambulance chasing: this broker piggybacked on the LawPay\/MyCase acquisition news to pitch user data sales. (Identifying details redacted)<\/figcaption><\/figure>\n

Who’s buying?<\/p>\n