Fragomen, Del Rey, Bernsen & Loewy, LLP Data Breach Case

From the AG filing description

Fragomen, Del Rey, Bernsen & Loewy, LLP is a premier, global immigration law firm that assists corporate clients and individuals with complex visa petitions, permanent residency applications, labor certifications, and global mobility services. Because of the nature of its practice, the firm routinely collects, processes, and stores an extraordinary volume of highly sensitive personal and corporate data. This includes exhaustive biographical details, passport information, employment histories, tax documents, financial statements, and government identification numbers necessary to navigate intricate immigration and employment laws for thousands of high-profile employees and executives. In 2026, Fragomen, Del Rey, Bernsen & Loewy, LLP reported a significant data security incident to the California Attorney General. While the precise mechanics of the breach continue to be scrutinized, security incidents affecting major legal institutions often stem from unauthorized access to enterprise networks, sophisticated phishing attacks, or vulnerabilities within third-party vendor platforms used for document exchange and case management. Law firms represent prime targets for malicious actors precisely because they serve as central repositories for vast amounts of high-value, confidential data across multiple corporate clients. The data compromised in this incident likely includes a comprehensive array of personally identifiable information, such as full names, dates of birth, Social Security numbers, passport numbers, visa documentation, and financial or tax records. The exposure of this specific combination of data creates severe, long-term risks for affected individuals. Unlike a simple retail breach involving credit card numbers—which can be quickly cancelled and replaced—the compromise of immutable identifiers like Social Security numbers and passport details exposes victims to persistent threats of identity theft, fraudulent tax filings, unauthorized credit applications, and targeted social engineering schemes. As a legal entity handling sensitive client data, Fragomen, Del Rey, Bernsen & Loewy, LLP was bound by strict legal and professional obligations to secure its digital environment. Under California data protection laws and common-law duties of confidentiality and reasonable security, the firm was required to implement robust administrative, physical, and technical safeguards to protect client and employee data from unauthorized disclosure. The occurrence of a widespread data breach strongly suggests potential failures in maintaining adequate network segmentation, encryption protocols, or timely vulnerability patching, raising serious questions about whether the firm met its legal standard of care. Receiving a data breach notification letter from Fragomen, Del Rey, Bernsen & Loewy, LLP serves as formal legal notice that your confidential information was compromised due to inadequate security measures. Under the law, this notification establishes your legal standing to participate in a class action lawsuit aimed at holding the firm accountable for failing to safeguard your data. Individuals affected by this breach may be entitled to compensation for out-of-pocket losses, lost time, and the heightened risk of identity theft, all without needing to prove actual financial fraud has already occurred. Our firm handles these data breach cases on a contingency fee basis, meaning there is never any out-of-pocket cost or fee unless we successfully recover compensation for you.