Lawson Products, Inc.

Lawson Products, Inc. reported to HHS on 2022-07-26 a Hacking/IT Incident affecting 791 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, DOB, driver's license, SSN, and claims/financial data. The entity provided credit monitoring and implemented additional safeguards.

Zenith American Solutions reported to HHS on 2022-07-20 a Unauthorized Access/Disclosure affecting 30560 individuals. Breached information located on Paper/Films. The covered entity, Lawson Products, experienced a cyber-attack involving names, addresses, DOB, driver's licenses, SSNs, and claims/financial data. The CE provided credit monitoring and implemented safeguards.

Lawson Products, Inc. reported a cybersecurity incident to the California Attorney General's Office involving unauthorized third-party access to its network between February 2 and 8, 2022. The breach potentially compromised personal information, including names and government identifiers. Lawson engaged forensic investigators, secured its network, and notified law enforcement. Affected individuals were offered two years of credit monitoring services.

Lawson Products, Inc. reported a data breach affecting 28 Maine residents, part of a larger incident impacting 29,639 individuals. The breach, which occurred from February 2 to February 8, 2022, was discovered on February 8, 2022. The incident involved a phishing attack and malware. The compromised data includes names combined with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Affected individuals were notified on July 11, 2022, and offered 24 months of credit monitoring and identity theft protection services through Equifax.

Lawson Products, Inc. reported a data breach to the Maine Attorney General, stating that a phishing and malware attack occurred on February 2, 2022. The breach was discovered on February 8, 2022. The incident affected 28 Maine residents, and a total of 29,639 individuals. The compromised information includes names in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on July 11, 2022, and offered 24 months of credit monitoring and identity theft protection services through Equifax.