“When [Lockton] finally announced the data breach, it deliberately underplayed the breach’s severity and obfuscated the nature of the breach,” the complaint said. “[Lockton’s] breach notice fails to explain how the breach occurred (what security weakness was exploited), what exact data elements of each affected individual were compromised, who the data breach was perpetrated by, and the extent to which those data elements were compromised,” one suit alleged.
“When [Lockton] finally announced the data breach, it deliberately underplayed the breach’s severity and obfuscated the nature of the breach,” the complaint said. “[Lockton’s] breach notice fails to explain how the breach occurred (what security weakness was exploited), what exact data elements of each affected individual were compromised, who the data breach was perpetrated by, and the extent to which those data elements were compromised,” one suit alleged.