Lockton Companies, LLC, an insurance brokerage firm, reported that a social engineering attack on August 11, 2026, gave an unauthorized person access to certain employee accounts. Lockton sent notice letters dated October 9, 2026, and a notice copy was filed with the Massachusetts Attorney General. The source page was updated October 13, 2026.
The notice says affected files contained each recipient’s name and one or more additional data elements, but those elements were left unspecified in the sample notice. The number of affected people has not been disclosed. The available source does not confirm exposure of Social Security numbers, medical information, or financial data.
Further details, including the affected count and specific data elements, may emerge as notices or filings are updated. The available source does not provide a confirmed discovery date or a date when Lockton notified regulators.