ORLANDO, Fla. – Four people are facing extortion and fraud charges in connection with what authorities say was a fake immigration law office that stole millions of dollars from vulnerable victims.
Orange County deputies said the operation, run under the name Legacy Imigra.
The backstory:
According to authorities, Legacy Imigra posed as an immigration services firm helping undocumented immigrants obtain legal status, but investigators said no licensed attorneys were involved. Officials said the business operated out of a boarded-up office in Orlando.
CLICK TO DOWNLOAD THE FOX LOCAL APP
Sheriff John Mina said the suspects used “manipulation, fraud, lies and extortion” to build what he described as a more than $20 million scheme. Authorities said clients’ immigration documents were allegedly withheld until victims paid thousands of dollars in fees.
Sheriff: 4 arrested for…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.