On Thursday, April 20, the American Bar Association (ABA) notified its members of a March 6 data breach that resulted in an unauthorized third party gaining access on March 17 to certain usernames and hashed and salted passwords.