Fragomen, Del Rey, Bernsen & Loewy, LLP

A social engineering campaign gave an outsider remote access to a single Fragomen user account, caught May 5, 2026, and a subset of files left a firm whose business is immigration and identity records. How many people are in those files goes unsaid, exactly as it did in 2020, when Google employees' immigration data was the target at the same law firm. One persuaded employee was the entire boundary. Five months of review, and still no number of victims, not identification of a method and now real disclosure except a notice.