Southeast Series of Lockton Companies
Disclosed Feb 28, 20251 year ago1,168,911 affectedConfirmed
What is known
| People affected | 1,168,911 (as reported by the organization) |
|---|---|
| Disclosed | Feb 28, 2025 |
| Discovered | Nov 20, 2024 |
| Happened | Nov 20, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Southeast Series of Lockton Companiesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Southeast Series of Lockton Companiesatg.wa.gov · Official notice | Official notice |
| Delaware DOJ breach notice: Southeast Series of Lockton Companiesattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Southeast Series of Lockton Companiesjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Southeast Series of Lockton Companies (Business Associate, GA)ocrportal.hhs.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-03-20 Southeast Series of Lockton Companies Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Southeast Series of Lockton Companiesin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Feb 28, 2025 | 1,124,727 |
| Indiana AGresidents of IN | Feb 28, 2025 | 25,754 |
| California AGresidents of CA | Mar 20, 2025 | |
| Washington AGresidents of WA | Mar 20, 2025 | 11,794 |
| Delaware DOJresidents of DE | Mar 20, 2025 | 3,481 |
| Oregon DOJresidents of OR | Mar 20, 2025 | 112,702 |
| Vermont AGresidents of VT | Mar 20, 2025 | |
| California AGresidents of CA | Apr 8, 2025 | |
| California AGresidents of CA | May 23, 2025 | |
| California AGresidents of CA | Jun 27, 2025 |
History of this record
- 2026-09-25 · records_basis: hhs to organization · backfill source
- 2026-09-25 · records: 1124727 to 1168911 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-03-20-southeast-series-lockton-companies-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 982669 to 1124727 · backfill source
- 2026-09-25 · disclosed: 2025-03-20 to 2025-02-28 · backfill source
- 2026-09-25 · data_types: [] to ["names","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 982669 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2024-11-20 · backfill source
- 2026-09-25 · disclosed: 2025-04-08 to 2025-03-20 · backfill source
- 2026-09-25 · disclosed: 2025-05-23 to 2025-04-08 · backfill source
- 2026-09-25 · disclosed: 2025-06-27 to 2025-05-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.