Lawson Products
Disclosed Jul 11, 20224 years ago29,639 affectedConfirmed
Lawson Products, the covered entity (CE), reported that it experienced a cyber-attack affecting the protected health information (PHI) of 791 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, and claims and financial information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards.
What is known
| People affected | 29,639 (as reported by the organization) |
|---|---|
| Disclosed | Jul 11, 2022 |
| Happened | Feb 2, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Lawson Productsoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Lawson Productsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Lawson Products (Health Plan, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jul 11, 2022 | 182 |
| California AGresidents of CA | Jul 13, 2022 | |
| HHS archivetotal | Jul 26, 2022 | 791 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Lawson Products, the covered entity (CE), reported that it experienced a cyber-attack affecting the protected health information (PHI) of 791 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Soci · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 29639 · backfill source
- 2026-09-25 · disclosed: 2022-07-13 to 2022-07-11 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.