Almeida Law Group is investigating a data breach at the West Series of Lockton Companies, LLC. The breach occurred on May 13th, 2026. If you were affected, contact Almeida Law Group.
About the West Series of Lockton Companies, LLC
The West Series of Lockton Companies, LLC is part of Lockton Companies, the world’s largest privately held independent insurance brokerage firm. Founded in 1966 and headquartered in Kansas City, Missouri, Lockton provides insurance, risk management, employee benefits, and retirement services across more than 150 offices in over 160 countries, with more than 13,100 employees and global revenues exceeding $4.0 billion in fiscal 2025. In this incident, the West Series entity was acting as an insurance brokerage firm providing employee benefit services to Dexcom, Inc., a California-based company.
What Happened?
The West Series of Lockton Companies, LLC was listed in a California Attorney General sample breach notice reported on June 12th, 2026. This was an inadvertent data disclosure, not a cyberattack. On April 29th, 2026, Lockton sent an Excel file to three participants in a request for proposal process for family forming benefits for Dexcom employees. That file inadvertently contained employee personal information that was not intended for the recipients. Access to the file was promptly revoked, and all three RFP participants either confirmed they never accessed the file or confirmed they deleted it. Lockton states there is no indication the limited disclosure resulted in any misuse of the information.
The data exposed included Dexcom employee Social Security numbers, first names, last names, and dates of birth, and may have included limited employee benefits election information. Lockton is offering a complimentary two-year membership in Experian IdentityWorks to affected individuals.
It is worth noting that a separate Lockton entity — the Southeast Series of Lockton Companies, LLC — experienced a significant hacking incident detected on November 20th, 2024, involving a network server that affected approximately one million individuals and exposed names, addresses, Social Security numbers, medical information, health insurance information, and dates of birth. That incident led to a $9.9 million class action settlement that received final approval on May 7th, 2026. That prior breach and settlement are entirely separate from this West Series inadvertent disclosure incident.
Key Facts at a Glance
- Company or Organization: the West Series of Lockton Companies, LLC
- Industry: Insurance brokerage / Risk management / Employee benefits
- Location: Kansas City, Missouri (headquarters)
- Incident type: Inadvertent data disclosure (accidental exposure of an Excel file to three RFP vendors)
- Date of breach: May 13th, 2026
- Date of consumer notification: June 12th, 2026
- Identity theft protection offered: Two-year complimentary Experian IdentityWorks membership
- Prior breach: Southeast Series of Lockton Companies, LLC hacking incident detected November 20th, 2024; approximately 1 million individuals affected; $9.9 million class action settlement received final approval May 7th, 2026 (separate incident)
- Litigation status: No litigation identified specific to this West Series incident
- Source: California Attorney General sample breach notice; HIPAA Journal — Southeast Series Lockton litigation; ClaimDepot — $9.9M settlement final approval; Wikipedia — Lockton Companies
What Should You Do?
If you received a notice from Lockton, enroll in the complimentary two-year Experian IdentityWorks membership using the instructions provided in the letter. Even if you believe your information was not misused, it is a good idea to place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent anyone from opening new accounts in your name. Review your credit reports for any unfamiliar activity; you can request a free copy from each bureau once every 12 months at AnnualCreditReport.com or by calling 1-877-322-8228. Monitor your financial accounts closely for any suspicious transactions. If you suspect your information is being misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovering from identity theft.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
