Cerenade Data Breach Exposes Sensitive Immigration and Legal Client Data On October 2, 2025, Cerenade, a California-based technology company specializing in cloud-based legal and immigration case management, detected suspicious activity within its network. The company swiftly secured its systems, including its firewall and applications, resolving the incident by October 3, 2025. A subsequent forensic investigation revealed that an unauthorized intruder accessed and exfiltrated a limited set of documents during the breach. The Akira ransomware group later claimed responsibility, alleging they stole 100 GB of corporate data, including scanned client documents such as passports and visas from individuals in the U.S., India, Mexico, the Middle East, Japan, and other countries. The stolen data was advertised on the dark web on October 8, 2025. Exposed information may include: - Full names - Dates of birth - Social Security numbers - Passport numbers Cerenade publicly disclosed the breach to the California Attorney General’s office on January 2, 2026, and began notifying affected individuals by mail. The company is offering free IDX identity theft protection services to impacted clients. The breach has drawn the attention of Shamis & Gentile P.A., a law firm investigating potential legal action on behalf of affected individuals, who may be eligible for compensation. The incident highlights risks in legal and immigration case management systems, particularly for organizations handling sensitive personal data.