F500 Insurance Carriers · Insurance: Life, Health (Stock) · Data breach
Lincoln National
Headline
Lincoln National was caught in a massive cross-industry breach through a shared third-party vendor, which is the pattern that dominates the second half of this tracker.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Lincoln National was caught in a massive cross-industry breach through a shared third-party vendor, which is the pattern that dominates the second half of this tracker. Life and annuity data is also unusually long-lived, so exposure of a policy file can reach medical underwriting information a customer disclosed decades ago and has since forgotten they ever provided. The vendor was not chosen by, disclosed to, or evaluable by any policyholder.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual policyholder agreements.
Data sharing
MASSIVE, CROSS-INDUSTRY BREACH via a SHARED THIRD-PARTY VENDOR (Kelly Benefits, a payroll/benefits-enrollment administrator used by many employers): between Dec 12-17, 2024, unauthorized actors accessed Kelly Benefits' servers, exposing files containing personal information ORIGINALLY SHARED WITH KELLY BENEFITS BY EMPLOYERS for group insurance enrollment through Lincoln Financial — Lincoln's OWN systems were NOT breached, but individuals whose employer used Lincoln group products through Kelly Benefits were still exposed. Notification letters began March 14, 2025. SEPARATELY, this SAME Kelly Benefits (and other shared third-party administrator) breach wave affected a STAGGERING NUMBER of OTHER insurance carriers simultaneously — Kelly Benefits reported 45 affected clients — employers and carriers including Aetna, Guardian Life, Mutual of Omaha/United of Omaha, Reliance Standard, Humana, UnitedHealthcare and CareFirst — with the total reported to the Maine AG rising to 553,660 people (Lincoln separately reported 1,123 individuals to HHS OCR), per the HIPAA Journal.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy lincolnfinancial.com/public/privacy | Not fetched yet | NO (HTML only) |
| Terms of service lincolnfinancial.com/public/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.