Fragomen, Del Rey, Bernsen & Loewy, LLP
bd_0ae003031ade4ed6 · schema v1 · pii pii-v2
Full breach record for Fragomen, Del Rey, Bernsen & Loewy, LLP →2 incidents on fileFragomen, Del Rey, Bernsen & Loewy, LLP experienced a cybersecurity incident where an unauthorized third party used social engineering to impersonate IT staff and gain remote access to an employee's endpoint between May 4-5, 2026. The actor accessed and copied a subset of files containing personal information (name, alien registration number, passport number, SSN) of 2 New Hampshire residents. The incident was contained, and no primary systems or user credentials were compromised. Fragomen engaged cybersecurity experts, notified law enforcement, and is offering 24 months of credit monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
May 4, 2026
Begins
May 5, 2026
Discovered
Oct 2, 2026
Filed
vs. sector median
+2 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- California State AGbd_0f639f7f3cbd05cb2026-10-02Candidate
- Vermont State AGbd_1eca1cdca0b92c152026-10-02Verified
- Massachusetts State AGbd_1d485afe2516d7cd2026-10-01 · +1dVerified
- Texas State AGbd_3a23aac4e32332a92026-10-06 · +4dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Oct 1 (MA), last Oct 6 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.