Fong Ilagan, LLP Listed by genesis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 17, 2026, the ransomware group genesis listed Fong Ilagan, LLP on its leak site. The listing states that internal files were exfiltrated from the Texas immigration law firm during a ransomware attack. The number of individuals affected has not been reported, and no further details on the scale or method of the incident have been made public.

Inside the incident

The only confirmed information is the February 17 listing itself. Genesis claims responsibility for obtaining internal files, but the firm has not issued a statement confirming or denying the event. No timeline for the initial compromise, no count of affected records, and no description of the encryption or exfiltration methods have been disclosed.

Inside genesis

Genesis is a ransomware operation that maintains a public leak site to pressure victims. Like other groups in this category, it typically combines file encryption on targeted systems with the removal of data copies, then publishes samples or directories to encourage payment. The group’s listing of a victim is treated as an unverified claim until corroborated by the affected organization or independent investigation.

Who is Fong Ilagan, LLP?

Fong Ilagan, LLP is an immigration law firm based in Texas. Practices of this type routinely collect and store client immigration records, personal identifiers, financial documents, and correspondence with government agencies. A breach at such a firm is consequential because the data held is often sensitive and retained for extended periods to support ongoing legal matters.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific document types or data fields has been released. Organizations in this sector commonly hold names, addresses, dates of birth, immigration case details, and supporting evidence, yet the precise contents involved here remain unconfirmed.

The real-world impact

Individuals whose records were among the exfiltrated files face the possibility that personal and immigration-related information could be accessed by unauthorized parties. For the firm, the incident creates legal, regulatory, and operational questions that will require investigation and potential notification obligations. Both outcomes depend on details that have not yet been made public.

What to do if you're exposed

Anyone who has been a client of Fong Ilagan, LLP or who has otherwise shared personal information with the firm should monitor official communications from the organization for further updates.

• Review recent account statements and credit reports for unusual activity.
• Place fraud alerts or credit freezes with the major bureaus if immigration or financial details appear at risk.
• Contact the firm directly to ask what steps it is taking and whether individual notifications will be issued.
• Run a free exposure scan of your email address against known breach data to check for additional appearances.

AICompiled with AI assistance from public sources and published under our editorial standards.