Lyons Companies

Lyons Companies reported to HHS on 2019-08-23 a Hacking/IT Incident affecting 1982 individuals. Breached information located on Email. The covered entity reported that employees were victims of an email phishing scheme affecting ePHI including names, addresses, SSNs, driver's license numbers, health insurance, treatment, and financial information. The entity implemented additional safeguards and trained workforce on identifying fraudulent emails.

Affected (this filing): 1,982

Lyons Companies, an insurance brokerage firm, disclosed a phishing incident involving unauthorized access to two employee email accounts. The breach occurred between February 4 and March 12, 2019, and was discovered on March 12, 2019. The incident potentially exposed customer data, including names, Social Security numbers, and dates of birth, contained in the compromised emails. Lyons engaged forensic experts, enhanced system security, and provided complimentary identity monitoring services to affected individuals.