Lincoln Investment Planning, LLC disclosed a data breach exposing Social Security numbers, financial account codes, credit and debit information, government ID numbers, and health records. The company notified the Vermont Attorney General in September 2026. Affected individuals should immediately check their credit reports, place a fraud alert or credit freeze, and watch for phishing attempts and medical billing errors.
| Company | Lincoln Investment Planning, LLC |
|---|---|
| Industry | Finance |
| Data Types Exposed | Social Security Numbers, Financial Account Codes, Credit and Debit Account Information, Government ID Numbers, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Lincoln Investment Planning Data Breach?
Lincoln Investment Planning, LLC recently confirmed a data breach involving sensitive personal and financial information. The company filed a formal notification with the Vermont Attorney General’s office in September 2026. This filing revealed that unauthorized parties had access to a range of consumer data tied to the firm’s operations.
Details about the exact method of intrusion have not been publicly disclosed. However, the categories of exposed information suggest the incident involved systems that store both financial and health-related records. This points to a broad compromise of internal data repositories rather than a narrow, isolated issue.
The breach discovery date has not been made public. As a result, it remains unclear how long unauthorized access may have continued before the company identified it. Lincoln Investment Planning has not released a detailed public timeline explaining when the intrusion began or when internal teams first detected suspicious activity.
Following discovery, the company appears to have launched an internal investigation. This is a standard step for firms handling regulated financial data. In addition, the notification to Vermont’s Attorney General indicates the company recognized its legal obligation to report the incident once the scope of exposed data became clear.
Who was affected?
The population affected by this breach has not been fully detailed in public filings. Because Lincoln Investment Planning operates as an investment and financial services firm, those affected likely include current and former clients. Individuals who held retirement accounts, investment accounts, or insurance products through the company may be among those impacted.
The exact number of affected individuals has not been publicly disclosed. Therefore, it is not yet possible to know the full scale of this breach nationwide. Vermont residents are confirmed as part of the affected population, given the state notification requirement, but the incident may extend to customers in other states as well.
Because financial services firms often maintain long-term client relationships, some affected individuals could include people who closed accounts years ago. This means the impact may reach beyond current, active clients. Meanwhile, it is unclear whether employees of the firm were also included in the exposed data set.
What Information Was Potentially Exposed?
According to the breach notification, several sensitive categories of personal data were involved. This combination of financial and medical information makes this incident particularly serious. The exposed data types include:
- Social Security Numbers
- Financial Account Codes
- Credit and Debit Account Information
- Government ID Numbers
- Health Records
This mix of data creates significant risk for those affected. Social Security numbers combined with financial account codes can allow criminals to open new credit lines or attempt to take over existing accounts. Because government ID numbers were also exposed, fraudsters could use this information to impersonate victims in various official transactions.
In addition, the presence of health records raises the possibility of medical identity theft. This occurs when someone uses stolen health information to obtain medical services or prescriptions under another person’s name. As a result, affected individuals may need to monitor not just their credit reports, but also their medical billing statements and insurance explanations of benefits.
What is the company doing?
Lincoln Investment Planning responded to the breach by notifying regulators as required by law. Specifically, the company filed formal notification with the Vermont Attorney General in September 2026. This filing disclosed the categories of data involved and confirmed the company’s awareness of the exposure.
Beyond the regulatory filing, specific remediation steps have not been fully detailed in public records. However, companies in this situation typically work to secure affected systems, assess the scope of the breach, and determine notification obligations across multiple states. Because the exposed data included health records, the company may also face additional compliance requirements tied to medical privacy laws.
Going forward, affected individuals should watch for direct notification letters from the company. These letters often include specific instructions and may offer complimentary credit monitoring or identity protection services. If such an offer becomes available, it is worth enrolling promptly to reduce potential harm.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Anyone whose Social Security number was exposed should begin monitoring credit reports regularly. This helps catch new accounts or inquiries that were not authorized. You can request free reports from each of the three major credit bureaus through the official government-authorized website.
Because fraud can take months to appear, it helps to check reports on a rotating schedule throughout the year. This means requesting a report from one bureau every few months instead of all three at once. As a result, you gain more consistent coverage without any added cost.
Consider a Credit Freeze or Fraud Alert
Given that Social Security numbers and government ID numbers were exposed, a credit freeze offers strong protection. A freeze blocks new creditors from accessing your credit file. This makes it much harder for identity thieves to open accounts in your name.
Alternatively, a fraud alert requires lenders to verify your identity before extending new credit. This is a lighter-touch option than a full freeze. Either step can be done directly through each credit bureau’s website, and both are free to place.
Watch for Medical Identity Theft
Because health records were part of this breach, affected individuals should review any insurance statements carefully. Look for unfamiliar medical charges, services you never received, or new health insurance claims filed under your name. This can be an early sign that someone is using your identity for medical fraud.
If you notice discrepancies, contact your health insurance provider immediately. In addition, request a copy of your medical records to check for inaccuracies. Correcting these errors quickly can prevent long-term complications with your healthcare coverage and billing history.
Stay Alert for Phishing Attempts
After a breach involving this much personal data, scammers often follow up with targeted phishing emails or phone calls. These messages may impersonate Lincoln Investment Planning, a bank, or a government agency. Because scammers now have real personal details, their messages can appear more convincing than typical phishing attempts.
Therefore, avoid clicking links in unsolicited emails or texts claiming to be from financial institutions. Instead, contact the company directly using a phone number from its official website. This simple habit can prevent you from accidentally handing over additional sensitive information.
Consult a Data Breach Attorney
Given the sensitivity of the exposed data, affected individuals may want to explore their legal options. A data breach attorney can help determine whether you qualify for compensation. Many offer free consultations, so there is little risk in simply asking questions.
Because class action lawsuits often follow breaches involving Social Security numbers and health records, staying informed about legal developments related to this incident is wise. An attorney can also help you understand any deadlines that may apply to your specific situation.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General