Lockton Companies 5,000 Settlement for November 2024 Data Breach Claims

Southeast Series of Lockton Companies, part of the larger Lockton insurance brokerage network, reported a data breach in November 2024 that potentially exposed individuals’ personal information held in its systems. Incidents like this are common in industries that store sensitive identifiers for client servicing—especially insurance and benefits administrators—because they aggregate high-value data such as contact details, dates of birth, Social Security numbers, and insurance-related records that can be used for identity theft or financial fraud. The class action was filed by affected individuals who argue the company failed to implement reasonable security safeguards and/or provided inadequate protection of the data entrusted to it, creating an increased risk of identity theft and related harms. The proposed settlement offers payments of up to $5,000, with a claims deadline of 4/7/26, and indicates “no proof required” for participation—terms that matter because they can broaden eligibility and reduce friction for people who may not have clear documentation of misuse but still faced exposure and time spent monitoring accounts or freezing credit. This case fits a broader trend of consumer privacy and cybersecurity class actions following breaches at insurers, third‑party administrators, and financial services vendors, where plaintiffs often pursue claims under negligence, breach of implied contract, and state consumer‑protection theories. It also sits within a regulatory backdrop that pressures covered entities to strengthen cybersecurity and breach response, including state data-breach notification laws, state insurance-sector cybersecurity rules (such as New York’s DFS cybersecurity regulation for financial institutions), and the FTC’s enforcement of “reasonable security” standards for companies handling consumer data.