Fragomen Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / Fragomen
Active investigation Data breach · Immigration Law Notices mailed Oct 2, 2026

Received an October 2026 breach notice from Fragomen?

Dapeer Law, P.A. is investigating a potential class action against Fragomen, Del Rey, Bernsen & Loewy, LLP, a global immigration law firm, on behalf of individuals whose names and other personal information may have been exposed when an unauthorized third party accessed a Fragomen user account in May 2026.

Submit your claim → See what to do No fee unless we recover for you
Breach window
Discovered May 5, 2026
Remote access to a single user account
Notification delay
~5 months
Discovered May 2026, notices Oct 2026
Credit monitoring
24 months
Through Experian IdentityWorks
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from Fragomen dated October 2026.
  • Your letter offered enrollment in a free 24-month Experian IdentityWorks membership.
  • Your personal information was held by Fragomen in connection with immigration, visa, or global mobility services, for example as an applicant, sponsored employee, or family member.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility →
Background

What happened

On May 5, 2026, Fragomen, Del Rey, Bernsen & Loewy, LLP, a global immigration services firm, learned that an unauthorized third party had remote access to a single user account. According to the notice, the access was tied to a social engineering campaign, and the intruder accessed and copied a subset of files. Fragomen states that it contained the account, engaged a cybersecurity firm to investigate, and notified law enforcement.

After reviewing the copied files to identify whose information was involved, Fragomen began mailing notification letters on October 2, 2026, roughly five months after discovery, and filed a sample notice with the California Attorney General. The public sample letter confirms that names were involved, but the additional data categories appear as a blank placeholder in that copy, so the specific information affected may vary by individual. Fragomen is offering a complimentary 24-month Experian IdentityWorks membership, and the number of affected individuals has not been disclosed.

Because Fragomen handles immigration and visa matters, its files can contain highly sensitive records about clients, sponsored employees, and their families. Exposure of this kind of information can raise identity theft and fraud concerns, and it raises questions about how the firm protected access to its systems against social engineering attacks.

Immigration law firm Social engineering attack Single account compromise California AG filing Experian IdentityWorks
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your letter contains the activation code for Experian IdentityWorks and lists the specific categories of your information involved, and it is important evidence if you decide to participate in a lawsuit.

2

Enroll in the free 24-month credit monitoring

Enroll in the Experian IdentityWorks membership offered in your letter before the January 29, 2027 enrollment deadline, or call Fragomen's dedicated line at 833-931-4744 (Monday through Friday, 9 a.m. to 9 p.m. Eastern). Accepting this benefit does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because immigration files can include passport, visa, and employment details, also watch for unexpected correspondence about immigration filings, tax records, or accounts opened in your name.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim →
Timeline

Breach timeline

May 5, 2026 Passed
Unauthorized remote access to a Fragomen user account discovered
May 2026 Passed
Account contained, cybersecurity firm engaged, law enforcement notified
May to Sep 2026 Passed
Review of copied files to identify affected individuals
Oct 2, 2026 Passed
Notice filed with the California Attorney General, letters mailed
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, fraud using passport, visa, or immigration-related information, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring Fragomen to implement stronger data security practices going forward, including safeguards against social engineering and unauthorized account access.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from Fragomen. What should I do? +

Keep the letter, enroll in the free 24-month Experian IdentityWorks membership using the activation code it contains, and review your credit reports and account statements closely. Consider placing a fraud alert or security freeze with Equifax, Experian, and TransUnion, and visit IdentityTheft.gov for additional guidance. Speak with a data breach attorney about your legal rights.

Am I eligible to join a class action against Fragomen? +

If you received a breach notice from Fragomen about the May 2026 incident, you may be eligible for a free case evaluation. Eligibility depends on factors such as your state of residence, the categories of your data involved, and any fraud, identity theft, or time spent resolving issues. Dapeer Law will review your situation at no cost.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

The public sample notice confirms that names were involved. The additional data categories appear as a placeholder in that copy, so they were not publicly disclosed. Because Fragomen handles immigration matters, files may contain other sensitive personal information. Check your individual letter for the specific categories of your data that were involved.

Did Fragomen offer free credit monitoring? +

Yes. Fragomen is offering a complimentary 24-month Experian IdentityWorks membership. The enrollment deadline stated in the notice is January 29, 2027. Enrolling does not waive your right to pursue a legal claim.

How many people were affected by the Fragomen breach? +

The total number of affected individuals has not been publicly disclosed in the California Attorney General filing. This page will be updated as more information becomes available.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

The sample notice is available from the California Attorney General (PDF). If you received a letter but no longer have it, Dapeer Law can help you obtain a copy during your free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with Fragomen, Del Rey, Bernsen & Loewy, LLP, Experian IdentityWorks, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with California Attorney General on October 2, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Previous
Previous

Sheppard, Mullin, Richter & Hampton LLP Data Breach Lawsuit Investigation

Next
Next

Poppins Payroll Data Breach Lawsuit Investigation