DEXCOM, INC.

Sector: Medical Equipment | Revenue: $4.97B USD

The West Series of Lockton Companies, LLC, an insurance brokerage providing employee benefit services to Dexcom, Inc., inadvertently disclosed employee personal information to three RFP participants on May 13, 2026. An Excel file sent to solicit proposals for family forming benefits contained Social Security numbers, names, dates of birth, and potentially benefits election data. Access was promptly revoked, and participants confirmed deletion or non-access. Lockton is offering two years of Experian IdentityWorks to affected employees.

The West Series of Lockton Companies, LLC (Lockton), a vendor for Dexcom, Inc., inadvertently disclosed personal information of Dexcom employees to three RFP participants on April 29, 2026. An Excel file sent to inform proposals contained names, dates of birth, Social Security numbers, and potentially benefits election information. Access was promptly revoked. One participant opened and deleted the file; two others confirmed they did not open it. Four New Hampshire residents were affected. Lockton is providing two years of credit monitoring.

Lockton, an insurance brokerage, inadvertently disclosed employee PII (SSNs, names, DOBs) to RFP participants in an Excel file on April 29, 2026. Access was revoked, and participants confirmed deletion. Lockton provided two years of Experian IdentityWorks to affected Dexcom employees. No evidence of misuse was found.

Lockton, an insurance brokerage for Dexcom, Inc., inadvertently included employee personal information (SSNs, names, DOBs) in an Excel file sent to three RFP participants on April 29, 2026. Access was promptly revoked, and participants confirmed deletion or non-access. No misuse indicated. Affected employees received 2 years of Experian IdentityWorks.

Dexcom, Inc. notified Vermont AG that a misconfiguration in its account management system inadvertently shared limited health data (glucose values, insulin doses, device type) with partners after users revoked consent. The error occurred between June 16 and August 14, 2025, and was discovered on August 25, 2025. No names were shared, only tokens. Dexcom applied a software update to revoke consent immediately.

Dexcom, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-05-06 and was reported on 2025-06-18. 1 Indiana residents were affected. 23 individuals affected in total.