2026 Fragomen, Del Rey, Bernsen & Loewy — social-engineering access to one account; client files copied
Data compromised
Personal information contained in the copied files, for individuals identified by the review. The extracted notice text does not itemise the data elements.
Technical writeup
Notice dated October 2, 2026, listed by the California Attorney General the same day. Fragomen is a global immigration services law firm. Count not stated. recordsAffected 0.
Root cause
On May 5, 2026 Fragomen learned that an unauthorised third party had gained remote access to a single user account, which it determined was part of a social engineering campaign. The actor accessed and copied a subset of files.