HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PIIHighContained

Southeast Series of Lockton Companies, LLC (Lockton)

bd_4475760419a1b588 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 20, 2024

Filed

Apr 3, 2025

To disclose

19 weeks

Affected

3,763state residents only

Linked

24 filings

Confidence

66%

Full breach record for Southeast Series of Lockton Companies, LLC (Lockton) →3 incidents on file

Southeast Series of Lockton Companies, LLC reported a cybersecurity incident discovered on November 20, 2024, where an unauthorized party accessed a single individual account and computer. The incident affected 3,763 Rhode Island residents, exposing names, SSNs, dates of birth, and medical/insurance information. Lockton engaged third-party experts, notified law enforcement, and began notifying affected individuals on February 5, 2025, offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 134 days

Nov 20, 2024

Begins

Nov 20, 2024

Discovered

Apr 3, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 24 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

New Hampshire State AGbd_ab1f596c26daaa252025-04-08 · +5dVerified
California State AGbd_e0c26fe7d81dd2862025-04-08 · +5dVerified by operator
Iowa State AGbd_affe720a13d679592025-03-28 · +6dCandidate
California State AGbd_2606bdefd74e0bcc2025-05-23 · +50dVerified

Show 6 more filings ↓up to 89d gap

Delaware State AGbd_d8aed05bb7d559f42025-05-23 · +50dVerified by operator
New Hampshire State AGbd_e6327a5b12a7f2242025-05-23 · +50dVerified
California State AGbd_126301bea6b93bb42025-06-27 · +85dVerified by operator
New Hampshire State AGbd_6698308b150da8c42025-06-27 · +85dVerified
Delaware State AGbd_702f871b1717294b2025-06-27 · +85dVerified by operator
Texas State AGbd_9b8e991fbe3612722025-07-01 · +89dVerified by operator

Showing first 10 of 23 linked disclosures.

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: Southeast Series of Lockton Companies, LLC (Lockton)
norm: southeast series of lockton companies llc lockton
Industry: Financial Servicesllm

Discovered: Nov 20, 2024
Breach occurred: Nov 20, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 5, 2025
Affected individuals: 3,763state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Began an investigation
Engaged third-party cybersecurity experts
Notified law enforcement
Changes made: Implemented additional security measures designed to enhance the security of its systems and data
Offered 24 months of complimentary credit monitoring and fraud protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(134 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Iowa State AGMar 28 · first

Rhode Island State AG+6d · this page

New Hampshire State AG+11d

California State AG+11d

California State AG+56d

Delaware State AG+56d

New Hampshire State AG+56d

California State AG+91d

New Hampshire State AG+91d

Delaware State AG+91d

Texas State AG+95d

Pattern: first filing Mar 28 (IA), last Jul 1 (TX) — a 95-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 23 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://riag.ri.gov/media/7441/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2025
Raw hash: 0a1ea0522fdc33b0cf12b7dffa2b6f4911c0f9732c9e38baec6497e4dadd43a5

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityNorton Rose Fulbright US LLP

Victim entitySoutheast Series of Lockton Companies, LLC (Lockton)

Incidentdiscovered Nov 20, 2024

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceriag.ri.gov