Fragomen Law Firm Reports Data Breach Impacting Client Data

Fragomen, Del Rey, Bernsen & Loewy, LLP, a prominent global immigration law firm, filed notice of a data security incident with California regulators on October 2, 2026. This report follows a breach event identified on May 4, 2026. The firm handles complex visa petitions, permanent residency applications, and global mobility services for corporate clients and individuals.

Due to the specialized nature of its work, Fragomen routinely collects and stores extensive confidential personal and corporate data. This includes exhaustive biographical details, passport information, employment histories, tax documents, financial statements, and government identification numbers, all necessary for navigating intricate immigration processes.

The data types reported as exposed in this incident include Full Name, Social Security Number, Date of Birth, Passport and Visa Details, Employment History and Compensation Records, Tax and Financial Documents, Home Address, and Contact Information. The exposure of such comprehensive personal data can lead to significant and long-lasting risks for those affected.

Unlike breaches involving less sensitive information, the compromise of immutable identifiers such as Social Security Numbers and passport details can expose individuals to persistent threats. These risks include identity theft, fraudulent tax filings, unauthorized credit applications, and targeted social engineering schemes.

Individuals who receive a data breach notification letter should remain vigilant. It is generally recommended to monitor financial accounts and credit reports for any suspicious activity. Consider placing a fraud alert or security freeze on your credit files with major credit bureaus. Also, be wary of unexpected communications that ask for personal information, as these could be phishing attempts.