RansomwareLawGroup.com

> Cause not stated in filing

Fragomen, Del Rey, Bernsen & Loewy, LLP data breach investigation

Fragomen, Del Rey, Bernsen & Loewy, LLP reported a data security incident in Texas, confirming unauthorized access to sensitive personal data. This event raises serious questions about the firm's security practices, potentially exposing individuals to long-term risks like identity theft and financial fraud due to compromised immigration and financial details.

Filed
October 6, 2026
Regulator
Texas AG
People affected
Not stated
File status
Monitoring

What the filing confirms

  • Fragomen, Del Rey, Bernsen & Loewy, LLP reported the incident to the Texas Attorney General.
  • Information involved: Full Name, Social Security Number, Date of Birth, Passport and Visa Details, Foreign National Identification Number, Home Address and Contact Information, Employment and Compensation Records, Financial Account and Tax Information.

Still unknown

  • How many people were affected. The filing does not give a number.
  • What caused the incident beyond the description in the filing.
  • How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Read the filing at the source

Investigation notes

Fragomen, Del Rey, Bernsen & Loewy, LLP, a global immigration law firm, recently reported a data security incident to the Texas Attorney General. This official filing confirms that unauthorized actors accessed or obtained sensitive personal information from the firm's systems, with the breach date identified as May 4, 2026. The firm submitted its report on October 6, 2026.

The incident is reported to have exposed several categories of highly sensitive personal data. These include Full Name, Social Security Number, Date of Birth, Passport and Visa Details, Foreign National Identification Number, Home Address and Contact Information, Employment and Compensation Records, and Financial Account and Tax Information. The exposure of such detailed records creates significant risks for affected individuals.

As a professional services entity handling extensive confidential information for corporate and individual clients, Fragomen had a legal duty to implement robust security measures to protect this data. The occurrence of this breach initiates an investigation into whether adequate administrative, physical, and technical safeguards were in place. We are examining how unauthorized access occurred and for how long attackers may have had access to this sensitive information before the firm detected and contained the incident.

If you received a data breach notification from Fragomen, Del Rey, Bernsen & Loewy, LLP, it indicates that your personal information was part of this compromise. It is crucial to immediately monitor your financial accounts and credit reports for any suspicious or unauthorized activity. Consider placing a fraud alert or credit freeze with major credit bureaus to help prevent potential misuse of your exposed data.

Our firm is actively investigating whether Fragomen's data security protocols were sufficient to meet its legal obligations to protect sensitive client and personnel information. Individuals affected by this breach may have grounds for legal action to seek compensation for the increased risk of identity theft, financial fraud, and other harms. We are evaluating potential class action claims to hold the firm accountable for any alleged security lapses.

Receiving a notification letter establishes your standing to seek legal recourse. You do not need to prove immediate financial loss to explore your options. We offer free, no-obligation case reviews to help you understand your rights and potential next steps without any upfront cost.

What our attorneys examine

A cyberattack does not excuse a company from protecting the information it holds. We look at whether Fragomen, Del Rey, Bernsen & Loewy, LLP used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Texas.

Fragomen, Del Rey, Bernsen & Loewy, LLP data breach questions

How many people were affected by the Fragomen, Del Rey, Bernsen & Loewy, LLP data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Social Security Number, Date of Birth, Passport and Visa Details, Foreign National Identification Number, Home Address and Contact Information, Employment and Compensation Records, Financial Account and Tax Information. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Is the Fragomen, Del Rey, Bernsen & Loewy, LLP data breach letter legit or a scam?
A notice from Fragomen, Del Rey, Bernsen & Loewy, LLP in the mail matches the breach Fragomen, Del Rey, Bernsen & Loewy, LLP reported to the Texas Attorney General on October 6, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Fragomen, Del Rey, Bernsen & Loewy, LLP through a phone number or website you find yourself.
Did Fragomen, Del Rey, Bernsen & Loewy, LLP offer free credit monitoring?
Any free monitoring Fragomen, Del Rey, Bernsen & Loewy, LLP is offering will be described in the notice you received, along with an activation code and a sign-up deadline. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Using the free service won't stop you from joining a lawsuit or settlement later.
Is there a Fragomen, Del Rey, Bernsen & Loewy, LLP data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Fragomen, Del Rey, Bernsen & Loewy, LLP. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
What should I do after getting the Fragomen, Del Rey, Bernsen & Loewy, LLP data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Where can I see the official Fragomen, Del Rey, Bernsen & Loewy, LLP breach notice?
Fragomen, Del Rey, Bernsen & Loewy, LLP's report is published by the Texas Attorney General: https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005396 Compare it with the letter you received to confirm the dates and details match.
Do I need a Fragomen, Del Rey, Bernsen & Loewy, LLP data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Can I sue Fragomen, Del Rey, Bernsen & Loewy, LLP over the data breach?
It depends on what was exposed, the law in Texas and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
How much could a Fragomen, Del Rey, Bernsen & Loewy, LLP data breach settlement or claim be worth?
There is no set amount, and no Fragomen, Del Rey, Bernsen & Loewy, LLP settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Social Security Number, Date of Birth as involved. Keep receipts and records; they're what damages claims are built on.

Other open files in Texas

Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.