Loring, Wolcott & Coolidge (“LWC”), located at 230 Congress St., Boston, MA 02110, is a financial services company that offers a wide range of fiduciary and investment management services. LWC is issuing this notice about a recent event that may impact the security of certain personal information related to its clients and the steps LWC has taken in response.

What Happened: On May 12, 2024, LWC discovered suspicious activity within its environment (the “Incident”). LWC initiated its incident response protocols and promptly began an investigation with the assistance of third-party cybersecurity specialists, retained through outside counsel, to determine the nature and scope of the suspicious activity. Additionally, in conjunction with the forensic investigation, LWC also worked to contain and remediate the Incident, an effort which has since been completed.

The in-depth cyber forensic investigation determined that unauthorized activity occurred between April 26, 2024 and May 12, 2024, that LWC’s systems were impacted by malware, and that a certain amount of data was subject to unauthorized access and in some cases acquisition. With the assistance of a third-party data analytics firm, also retained through outside counsel, LWC conducted a comprehensive and time-intensive review of the data at issue to determine the types of personal information at risk and identify to whom the personal information relates. In addition, LWC conducted a review of its internal files to further assess the impacted data. Following the review, LWC began providing written notice of the Incident to potentially impacted individuals.

What Information Was Involved: The impacted information varies by individual but includes some or all of the following: name, address, Social Security number, date of birth, driver’s license number or state identification number, bank account number (in some cases with PIN/security code), debit/credit card number, passport number, tax identification number (TIN), IRS PIN, health/medical insurance policy number, username and password or email address and password, biometric data, digital signature, and mother’s maiden name.

How We Have Responded: LWC is committed to and takes very seriously, its responsibility to protect all data entrusted to it. As part of our ongoing commitment to the privacy of personal information in our care, we reviewed our existing policies and procedures and implemented additional safeguards to further secure our systems and the information contained therein. Additionally, LWC notified and consulted with law enforcement throughout the course of the Incident.

LWC mailed notification letters to potentially affected individuals beginning on October 17, 2024. If you did not receive a notification letter, but believe you may have been affected by this Incident, please contact the dedicated assistance line we have set up using the phone number provided in the “For More Information” section below.

What Potentially Affected Individuals Can Do: As a best practice, LWC encourages individuals to remain vigilant against incidents of identity theft and fraud by reviewing their financial account statements and credit reports for any anomalies. LWC is offering potentially impacted individuals access to complimentary credit monitoring and identity restoration services for three (3) years as well as providing guidance on how to protect against identity theft and fraud, including advising individuals to report any suspected identity theft or fraud to their financial institutions. If you believe that you may have been impacted by this Incident, please contact the dedicated assistance line we have set up using the phone number provided in the “For More Information” section below. If you are one of the potentially affected individuals, the call center agent can help you enroll in the complimentary credit monitoring and identity restoration services we are offering. Please note the deadline to enroll in LWC’s complementary identity protection services is January 17, 2025.

For More Information: For questions, please contact the dedicated assistance line that we have established regarding this Incident by dialing 1-866-980-5849 Monday through Friday from 9 am – 9 pm ET, excluding U.S. holidays.

View source version on businesswire.com: https://www.businesswire.com/news/home/20241023694576/en/