HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICPIILowActive
Fragomen, Del Rey, Bernsen & Loewy, LLP
bd_20396fac0403c159 · schema v1 · pii pii-v1
Full breach record for Fragomen, Del Rey, Bernsen & Loewy, LLP →Fragomen, Del Rey, Bernsen & Loewy, LLP notified Google employees and former employees of a data breach involving unauthorized access to a file containing I-9 employment verification records. The breach occurred between July 1 and July 16, 2020, and was discovered on September 24, 2020. The file contained names and variable personal data. Fragmen engaged forensic investigators, enhanced IT security, and offered credit monitoring services.
California clockDiscovered Sep 24, 2020 → Notified Oct 23, 202029d ✓ CA 60-day OK29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-195495
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2020
- Raw hash
- c25c1953208f358922d4628b5449ea274523021478f95b6edcfdcbd50adfeddd
Reporting entity
- Name
- Fragomen, Del Rey, Bernsen & Loewy, LLPnorm: fragomen del rey bernsen loewy
- Domain
- fragomen.com
- Industry
- professional_services
Victim entity
- Name
- Fragomen, Del Rey, Bernsen & Loewy, LLPnorm: fragomen del rey bernsen loewy
- Domain
- fragomen.com
- Industry
- professional_services
Incident
- Discovered
- Sep 24, 2020
- Materiality determined
- Oct 23, 2020
- Notification sent
- Oct 23, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 24, 2020→ Notified: Oct 23, 202029d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.