HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPHIHealth (basic)FinancialMediumContained

Southeast Series of Lockton Companies, LLC (Lockton)

bd_2920eb8e7cca2748 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 20, 2024

Filed

Feb 28, 2025

To disclose

14 weeks

Affected

3state residents only

Linked

24 filings

Confidence

66%

Full breach record for Southeast Series of Lockton Companies, LLC (Lockton) →3 incidents on file

The Southeast Series of Lockton Companies, LLC (Lockton) notified the Maryland Attorney General of a cybersecurity incident discovered on November 20, 2024. An unauthorized party accessed a single individual account and computer, obtaining files containing personal information of individuals associated with Lockton's clients, including Coca-Cola Bottlers' Sales and Services Company, LLC. The data exposed included names, Social Security numbers, dates of birth, dates of treatment/medical diagnoses, and health insurance coverage information. Three Maryland residents were affected. Lockton engaged third-party cybersecurity experts, notified law enforcement, and is offering 24 months of credit monitoring to affected individuals. Notification letters began being mailed on February 5, 2025.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d14 weeks discovery → filing

Incident timeline

discovery → filing · 14 weeks / 100 days

Nov 20, 2024

Begins

Nov 20, 2024

Discovered

Feb 28, 2025

Filed

vs. sector median

5 wks faster

This filing is one of 24 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Rhode Island State AGbd_4475760419a1b5882025-04-03 · +34dVerified by operator
New Hampshire State AGbd_ab1f596c26daaa252025-04-08 · +39dVerified
California State AGbd_e0c26fe7d81dd2862025-04-08 · +39dVerified by operator
California State AGbd_2606bdefd74e0bcc2025-05-23 · +84dVerified

Show 6 more filings ↓up to 123d gap

Delaware State AGbd_d8aed05bb7d559f42025-05-23 · +84dVerified by operator
New Hampshire State AGbd_e6327a5b12a7f2242025-05-23 · +84dVerified
California State AGbd_126301bea6b93bb42025-06-27 · +119dVerified by operator
New Hampshire State AGbd_6698308b150da8c42025-06-27 · +119dVerified
Delaware State AGbd_702f871b1717294b2025-06-27 · +119dVerified by operator
Texas State AGbd_9b8e991fbe3612722025-07-01 · +123dVerified by operator

Showing first 10 of 23 linked disclosures.

Name: The Southeast Series of Lockton Companies, LLC
norm: the southeast series of lockton companies

Name: Southeast Series of Lockton Companies, LLC (Lockton)
norm: southeast series of lockton companies llc lockton
Industry: Professional Servicesllm

Discovered: Nov 20, 2024
Breach occurred: Nov 20, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 5, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)Financial
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Maryland Office of the Attorney General

During the incident: Began an investigation
Engaged third-party cybersecurity experts
Notified law enforcement
Conducted a robust review of the files to identify individuals whose personal information may have been contained within the files
Began notifying a limited number of clients that were affected by this incident
Offered to provide notifications on their behalf
Began mailing notification letters to the three (3) affected Maryland residents
Offering 24 months of complementary credit monitoring and fraud protection services to these individuals
Providing a telephone number for affected individuals to call with any questions regarding the incident
Including a website where individuals can find more information about their credit monitoring product and receive assistance regarding the process
Changes made: Implemented additional security measures designed to enhance the security of its systems and data
Continues to evaluate additional security measures designed to enhance the security of its systems and data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Maryland State AGFeb 28 · first · this page

Rhode Island State AG+34d

New Hampshire State AG+39d

California State AG+39d

California State AG+84d

Delaware State AG+84d

New Hampshire State AG+84d

California State AG+119d

New Hampshire State AG+119d

Delaware State AG+119d

Texas State AG+123d

Pattern: first filing Feb 28 (MD), last Jul 1 (TX) — a 123-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 23 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376437.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2025
Raw hash: d08817d673fabc0ca5d33a76db3458f7d9096e10da9cb2130ea61fd58206dfad

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityThe Southeast Series of Lockton Companies, LLC

Victim entitySoutheast Series of Lockton Companies, LLC (Lockton)

Incidentdiscovered Nov 20, 2024

Stated responseBegan an investigation

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov