DisclosureLens
Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Fragomen, Del Rey, Bernsen & Loewy, LLP

bd_1d485afe2516d7cd · schema v1 · pii pii-v2

Severity

Low

Discovered

May 5, 2026

Filed

Oct 1, 2026

To disclose

—

Affected

7state residents only

Linked

5 filings

Confidence

67%
Full breach record for Fragomen, Del Rey, Bernsen & Loewy, LLP →2 incidents on file

Fragomen, Del Rey, Bernsen & Loewy, LLP notified affected individuals of a cybersecurity incident discovered on May 5, 2026. An unauthorized third party gained remote access to a single user account via a social engineering campaign. The attacker accessed and copied a subset of files containing personal information, including names. The incident was contained, and cybersecurity experts were engaged. Fragomen is offering 24 months of identity monitoring.

Incident timeline

May 5, 2026

Discovered

Oct 1, 2026

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Massachusetts State AGOct 1 · first · this page

Pattern: first filing Oct 1 (MA), last Oct 6 (TX) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.