Fragomen, Del Rey, Bernsen & Loewy, LLP data breach

Clerk's notes

Fragomen, Del Rey, Bernsen & Loewy, LLP, a prominent global immigration law firm, reported a data security incident to the California Attorney General's office on October 2, 2026. The firm, known for handling complex visa petitions and residency applications, identified the breach event as occurring on or around May 4, 2026. The current investigation status is listed as monitoring by the authorities.

Due to the nature of Fragomen's legal services, the exposed data is highly sensitive. The specific categories reported compromised include Full Name, Social Security Number, Date of Birth, Passport and Visa Details, Employment History and Compensation Records, Tax and Financial Documents, Home Address, and Contact Information. These types of immutable personal identifiers are critical for identity verification and can be exploited for various forms of fraud and identity theft.

As a legal entity handling a vast amount of confidential client information, Fragomen was subject to stringent data protection obligations, including California data protection laws. These laws require robust security measures to prevent unauthorized access and disclosure of personal data. The occurrence of this breach raises questions regarding the sufficiency of the firm's security protocols, such as network segmentation, encryption, or vulnerability management.

Individuals who received a data breach notification letter from Fragomen, Del Rey, Bernsen & Loewy, LLP should understand that their sensitive information was directly impacted. This notification serves as an official acknowledgment that your data was compromised. The exposure of such comprehensive personal details carries a significant and persistent risk of identity fraud, even if no immediate misuse is apparent.

If you received a data breach notification from Fragomen, Del Rey, Bernsen & Loewy, LLP, it is important to understand your legal standing. Your personal information was entrusted to the firm, and its compromise may indicate a failure in their duty to protect it. You may be eligible to request a free case review to explore potential recourse and understand your rights in this situation.

If a notification letter about this breach reached you, see every California data breach on file or browse all cases.