Prison phone services provider Securus Technologies breached, compromising 70M call recordings including 14K conversations between inmates and attorneys
Massive Hack of 70 Million Prisoner Phone Calls Indicates Violations of Attorney-Client Privilege
Context & Ripple Effects
This 2015 breach report is the first documented failure in what became a pattern for Securus Technologies: three years later a hacker breached Securus's servers again and handed a reporter access to client data — at a company that was simultaneously under scrutiny for letting police track any US phone in seconds with little vetting, per the Times' warrantless location-tracking exposé.
The arc did not end with one vendor. In 2020, HomeWAV, a video visitation provider used by prisons across the US, left inmates' private calls with families and attorneys exposed on an unprotected server — meaning the same privilege-violation failure recurred across different companies five years apart.
First-order effects
- Roughly 70 million recorded calls are compromised, and the 14,000 recorded inmate-attorney conversations mean attorney-client privilege was violated for an unknown number of ongoing cases, not merely archived.
- Securus's law-enforcement and corrections customers now have to answer for data they commissioned from a provider that could not protect it.
Second-order effects
- Corrections agencies contracting phone and visitation vendors face procurement pressure over retention and security of privileged recordings — pressure that resurfaced when HomeWAV's exposure showed the risk was industry-wide rather than one firm's lapse.
Third-order effects
- If vendors keep retaining millions of sensitive recordings as a default, breaches like this and the theft of call records from over ten cell network operators point toward forced limits on how long inmate communications are stored and who can access them — a shift from 'record everything' to audited, minimized retention.
- Attorney-client privilege becomes a systems question for prisons: legal protections written for face-to-face conversation do not survive mass digital recording unless contracts and oversight enforce separation of attorney calls.
The trend: Incarcerated people's communications are consolidating into a handful of vendors whose centralized recording archives keep failing, turning attorney-client privilege and call privacy into recurring systemic failures rather than isolated incidents.