You can sue a lawyer for breaking confidentiality, and depending on the circumstances you may bring claims for breach of fiduciary duty, legal malpractice, breach of contract, or intentional infliction of emotional distress. Winning takes more than showing your lawyer said something they shouldn’t have. You have to prove the disclosure wasn’t covered by one of the recognized exceptions and that it caused you real, measurable harm. A separate route, a state bar disciplinary complaint, runs alongside any lawsuit and can lead to sanctions up to disbarment, but it won’t put money in your pocket.
When a Disclosure Actually Counts as a Breach
Before assuming your lawyer did something wrong, check whether the disclosure fits an exception. If it does, the lawsuit fails at the starting line.
The ABA Model Rules of Professional Conduct, which every state uses as the basis for its ethics rules, let a lawyer reveal client information in a defined set of circumstances:1American Bar Association. Rule 1.6 – Confidentiality of Information
- To prevent reasonably certain death or substantial bodily harm to anyone.
- To prevent or mitigate a client’s crime or fraud that will cause substantial financial harm and involves the lawyer’s services.
- To defend against a malpractice claim, criminal charge, or disciplinary proceeding brought by or involving the client.
- To get advice about the lawyer’s own ethical obligations.
- To comply with a court order or other law.
- To detect conflicts of interest when the lawyer moves between firms, if the disclosure won’t compromise privilege or harm the client.
The crime-fraud exception is the one most often fought over. It strips away protection when a client sought legal help to further a crime or fraud.2American Bar Association. How the Crime-Fraud Exception Can Threaten Attorney-Client Privilege Confessing a past crime to your lawyer stays protected. Asking the lawyer to help you structure a fraudulent transaction does not.
Some states also require lawyers to report specific things, such as ongoing child abuse. Mandatory reporting rules vary by jurisdiction, so a disclosure required in one state may not be permitted in another.
One point worth clarifying: the ethical duty of confidentiality is broader than attorney-client privilege. Privilege is an evidence rule that stops courts from compelling a lawyer to testify about protected communications. The duty of confidentiality covers everything the lawyer learned in the course of representing you, no matter the source, and applies everywhere, not just in court.3American Bar Association. Rule 1.6 Confidentiality of Information – Comment A lawyer who talks about your case at dinner hasn’t broken any privilege, because no court compelled the disclosure, but they have breached the duty of confidentiality, and that is what your lawsuit rests on.
The Claims You Can Bring
When the disclosure doesn’t fit any exception, four legal theories are usually available.
Breach of Fiduciary Duty
This is the strongest and most common claim. Your lawyer owes you a fiduciary duty, the highest standard of care the law recognizes, and keeping your information confidential sits at its core. To win, you have to show the attorney-client relationship existed, the lawyer breached the duty by disclosing your information, the breach caused injury, and you suffered actual damages.4Harvard Law Review. Proving Breach of Former-Client Confidentiality Courts allow the claim for both current and former clients.
Legal Malpractice
If the breach was careless rather than deliberate, a negligence-based malpractice claim may fit. Think of a lawyer who left sensitive files where anyone could read them, sent an email to the wrong address, or failed to supervise staff who talked. You have to show the lawyer’s conduct fell below what a reasonably competent attorney would have done and that this failure caused you measurable harm.
Breach of Contract
If your engagement letter or retainer agreement included a confidentiality clause, you can sue for breaking it. The advantage is a simpler proof structure: the contract existed, the lawyer broke the confidentiality provision, and you were damaged. You don’t have to establish the higher standard of care that a fiduciary duty claim requires. Even when the written agreement is silent, the duty of confidentiality is implied in every attorney-client relationship.
Intentional Infliction of Emotional Distress
Reserved for disclosures so outrageous or reckless that they caused severe emotional harm, this claim clears a high bar. Courts generally want evidence of extreme conduct, not an ordinary lapse. Some jurisdictions limit emotional distress recovery in malpractice cases to situations involving egregious behavior or representations that were inherently personal.
Proving It Happened
Proof is where these cases usually turn. You need concrete evidence that the lawyer disclosed specific information and that the disclosure wasn’t authorized.
Start documenting the moment you suspect something. Write down what you believe was revealed, who received it, and how you found out. Save every email, letter, text, and voicemail connected to the lawyer or the disclosure. If a third party is the one who told you, ask for their account in writing.
Once a lawsuit is filed, discovery gives you tools. You can subpoena the lawyer’s emails, internal firm communications, phone records, and billing files. A key move is establishing exactly what information you shared with the lawyer and then showing the same information surfaced somewhere it shouldn’t have. The elements a court will look for are that the firm had a duty not to misuse your confidential information, that the firm breached the duty, and that the breach caused you injury.4Harvard Law Review. Proving Breach of Former-Client Confidentiality
Expect resistance on one front. Most courts hold that a law firm’s internal communications about a malpractice claim are protected by the firm’s own attorney-client privilege. A minority of courts carve out exceptions for communications involving current clients, but plan for the firm to fight production of internal emails and memos about your case.
What You Can Recover
A breach of confidentiality case is worth pursuing only if the disclosure caused real harm you can measure and prove.
Compensatory damages cover your actual losses. If the breach hurt your legal strategy and led to a worse outcome in your underlying case, you can seek the gap between what you would have recovered and what you actually got. Lost wages, the cost of hiring new counsel, and business opportunities destroyed by the disclosure fit here too.
Punitive damages are available in some jurisdictions when the breach was intentional, malicious, or fraudulent rather than merely negligent. Most malpractice insurance policies exclude coverage for intentional acts, so a punitive award often has to come from the lawyer personally. Collection can be harder, but the exposure creates real settlement pressure.
Emotional distress damages are difficult in most jurisdictions unless the conduct was particularly egregious or the representation was inherently personal, such as a family law or criminal defense matter.
Fee Forfeiture
A remedy many clients never hear about is fee forfeiture, which forces the lawyer to return some or all of what you paid. Under the Restatement of the Law Governing Lawyers, a lawyer who commits a clear and serious violation of duty to a client may be required to forfeit compensation. Courts weigh how serious and willful the violation was, when it occurred, how it affected the value of the lawyer’s work, and the harm it caused. Some courts apply an all-or-nothing rule: either the lawyer committed misconduct and loses the entire fee, or they didn’t and keep it. Fee forfeiture can be pursued alongside a damages claim and gives you a floor of recovery even when other damages are hard to quantify.
The Trade-Off of Suing
Something that catches many clients off guard: filing a lawsuit against your lawyer gives them permission to reveal more of your confidential information to defend themselves. The self-defense exception in Rule 1.6 lets a lawyer facing a malpractice claim or disciplinary proceeding disclose information about the representation to the extent reasonably necessary to mount a defense.1American Bar Association. Rule 1.6 – Confidentiality of Information
The disclosure has to stay limited and directly relevant. Your lawsuit isn’t a license for the lawyer to broadcast everything they know about you. Even so, litigation can surface details about your strategy, what you said, and the circumstances of the representation. Weigh this before filing, especially if the underlying matter involved sensitive personal or business information. A confidential settlement or a bar complaint sometimes exposes less than a full lawsuit would.
How Long You Have to Sue
Every state sets a statute of limitations for legal malpractice and breach of fiduciary duty. The usual window runs two to three years, though some states use shorter or longer periods depending on the theory. Missing the deadline almost always ends the case, no matter how strong the facts are.
The discovery rule gives some breathing room. In most states the clock doesn’t start until you knew or reasonably should have known about the breach. Confidentiality violations can stay hidden for years. If your lawyer quietly passed information to an opposing party and you only learned about it at a later deposition, the limitations period generally starts when you discovered the disclosure, not when it happened. The standard is objective: courts ask what a reasonable person in your position should have figured out through ordinary diligence.
Don’t wait to see how things develop. Consult a legal malpractice attorney as soon as you suspect a breach. These deadlines are unforgiving, and building the case takes time.
The Bar Complaint Alternative
A disciplinary complaint with your state bar is a separate track, and you can pursue it at the same time as a lawsuit. It won’t get you money, but it can produce real professional consequences for the lawyer.
Violating the duty of confidentiality under Rule 1.6 is professional misconduct.5American Bar Association. Rule 8.4 – Misconduct Every state bar has a process: you file a written complaint, a bar attorney reviews it to decide whether the facts suggest an ethical violation, and if the complaint has merit the bar opens a formal investigation. A confirmed violation can lead to private reprimand, public censure, suspension, or disbarment.
Filing a bar complaint as a client typically requires waiving confidentiality with respect to the matters being investigated. The bar has to talk with the lawyer to evaluate what you’ve alleged, and the lawyer will learn your identity and the specifics of your claims. Complaints and investigations are generally kept confidential within the disciplinary system until formal charges are filed, but disclosure inside that system is part of the process.
What to Do Right Now
If you think your lawyer disclosed your confidential information without permission, act quickly. Stop sharing new information with that lawyer immediately. You don’t need to formally end the relationship yet, but don’t hand over more material until you know what happened.
Get the facts down. Write out what was disclosed, how you found out, and who received it. Save every communication connected to the disclosure. If someone told you, ask them to put their account in writing.
Then consult a legal malpractice attorney before doing anything else. These cases turn on specialized knowledge of ethics rules, fiduciary duty law, and professional liability insurance. A malpractice lawyer can tell you whether the disclosure actually violated confidentiality, whether an exception applies, and whether your damages are large enough to justify a suit. Many offer initial consultations at no charge. With the statute of limitations running in the background, waiting even a few months to get advice can put your claim at risk.