ACUITY BRANDS LIGHTING, INC.

Acuity Brands, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-10-06 and was reported on 2022-12-06. 7,209 Indiana residents were affected. 37,137 individuals affected in total.

Acuity Brands, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-12-06. 297 Massachusetts residents were affected. The report records the breach type as electronic.

Acuity Brands, Inc. reported an external system breach (hacking) occurring between October 6, 2020, and December 8, 2021, discovered on December 7, 2021. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs) for 37,137 individuals, including 22 Maine residents. Notification was sent on December 6, 2022, offering 12 months of identity protection services via Experian.

Acuity Brands, Inc. disclosed two unrelated incidents of unauthorized access where an external actor copied files containing personal information. The first incident occurred Oct 6-7, 2020; the second Dec 7-8, 2021, when the company identified the breach. Affected data included names, SSNs, driver's license numbers, financial account info, and limited health/employment records. The company engaged third-party cybersecurity firms, secured systems, and offered one year of identity protection services.

Acuity Brands, Inc. notified individuals of unauthorized access to systems occurring in Oct 2020 and Dec 2021. Personal info, SSNs, driver's licenses, financial accounts, and limited health info were copied. Acuity engaged forensic investigators and offered 1 year of Experian IdentityWorks.