DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIdentity (basic)LowContained

Lockton

bd_436580653c524836 · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 11, 2026

Filed

Oct 1, 2026

To disclose

—

Affected

7state residents only

Confidence

68%
Full breach record for Lockton →2 incidents on file

Lockton Companies, LLC experienced a cybersecurity incident on August 11, 2026, involving a sophisticated social engineering attack that resulted in unauthorized access to certain employee user accounts. The access was confined to these accounts with no lateral movement. Personal information, including names and potentially other data, was involved. One Rhode Island resident was affected. Lockton engaged law enforcement and third-party cyber experts, activated incident response procedures, and is offering 24 months of complimentary identity monitoring.

Incident timeline

Aug 11, 2026

Begins

Aug 11, 2026

Discovered

Oct 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.