Fragomen Notifies Individuals After Social Engineering Incident Exposed Files

Fragomen, Del Rey, Bernsen & Loewy, LLP, a global immigration services firm, notified affected individuals of a data breach in a notice filed with the California Attorney General, reported 2026-10-02. The notice states that names and other personal information contained in a set of files were involved in the incident.

What the notice says

Fragomen states that on May 5, 2026, the firm learned that . The firm says its investigation found that . According to the notice, , including names and other information represented in the letter template by a placeholder field.

In response, Fragomen says it and is offering recipients a complimentary 24-month membership of Experian IdentityWorks, along with identity restoration support described in the notice.

What the notice leaves open

The notice as filed does not state the number of individuals affected by this incident. It also does not describe the timeframe over which the unauthorized access occurred, beyond identifying the date Fragomen says it learned of the activity. The notice does not specify every category of personal information involved beyond names, since the version reviewed contains a placeholder rather than a completed list of data elements.