AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
DEXCOM, INC.
bd_c65511a6a83cc373 · schema v1 · pii pii-v1
Full breach record for DEXCOM, INC. →On April 29, 2026, The West Series of Lockton Companies, LLC, an insurance brokerage providing employee benefits to Dexcom, Inc., inadvertently disclosed an Excel file containing Dexcom employees' names, Social Security numbers, dates of birth, and potentially benefits election information to three RFP participants. Access was revoked, and participants confirmed deletion. Lockton provided affected employees with a two-year complimentary Experian IdentityWorks membership.
Massachusetts clock⏱ MA AG >30d5 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1605ecaea23bf153California State AGfiled 2026-06-12(11d gap)Candidate
- bd_776fb90ed215b9e2New Hampshire State AGfiled 2026-06-12(11d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-965-the-west-series-of-lockton-companies-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 53c9ee9545266e09e758ce32963eb10a0b22ab7758bfa3f6c50dabe8c7493a28
Reporting entity
- Name
- the West Series of Lockton Companies, LLCnorm: the west series of lockton companies
Victim entity
- Name
- DEXCOM, INC.norm: dexcom
- Domain
- dexcom.com
Incident
- Discovered
- Apr 29, 2026
- Materiality determined
- —
- Notification sent
- Jun 12, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1567 Misuse of Trusted Relationships
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- MA AG >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.