Lincoln Investment Planning LLC Listed by SilentRansomGroup Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
The Lincoln Investment Planning LLC Listed by SilentRansomGroup Ransomware Group (reported June 7, 2022) is an unverified claim; the data involved is undisclosed belonging to roughly unknown people. If you have an account with them, your information may now be circulating on the open web and with data brokers. Here’s exactly what happened, how to check if you were affected, and what to do next.
On June 7, 2022, Lincoln Investment Planning LLC appeared on a listing associated with the SilentRansomGroup ransomware operation. The entry stated that internal files had been taken during a ransomware incident. No figure for the number of individuals affected has been released, and the company has not issued a public statement confirming or disputing the claim.
The listing is significant because Lincoln Investment Planning provides investment advice and banking-related services, a sector that routinely processes sensitive client financial information. Any confirmed exposure of such data would carry regulatory and personal-privacy implications that extend beyond the immediate incident.
What happened
The incident was first noted publicly on June 7, 2022, when Lincoln Investment Planning LLC was added to a site maintained by SilentRansomGroup. The only detail supplied in the listing is that internal files were allegedly exfiltrated during a ransomware attack. No information has been released about the date of the intrusion, the volume of data taken, the encryption status of systems, or whether a ransom demand was issued or met.
Public records do not show any subsequent confirmation from the company or from regulators regarding the scope or authenticity of the claim. The number of people whose information may have been involved remains unknown.
Who is SilentRansomGroup?
SilentRansomGroup is a ransomware operation that has been publicly tracked for several years. Like similar groups, it typically gains access to corporate networks, deploys encryption tools, and copies files before demanding payment. A common tactic is to publish victim names on a dedicated leak site when negotiations stall, presenting the action as evidence that data has been removed.
In this case the group claims Lincoln Investment Planning LLC was among its targets and that files were taken. No independent verification of that specific claim has been published by law-enforcement agencies or by the company itself.
About Lincoln Investment Planning LLC
Lincoln Investment Planning LLC was founded in 1968 and operates as a registered investment adviser and provider of related financial services. Firms of this type maintain client accounts, process investment transactions, and hold records that commonly include personal identifiers, account numbers, and financial histories.
Because the company’s work centers on long-term client relationships and regulatory compliance, any confirmed loss of internal records could affect both individual account holders and the firm’s obligations under financial-sector data-protection rules.
What was likely exposed
The only data category named in the listing is “internal files.” No inventory of specific document types, client records, or system data has been made public. It is therefore not possible to state with certainty which categories of information were removed.
Organizations that deliver investment advice and banking services routinely store client names, addresses, Social Security numbers, account details, and transaction histories. Whether any of those categories were among the exfiltrated files in this instance has not been confirmed.
Why it matters
Individuals whose records appear in the files of an investment adviser face the possibility that their personal and financial details could be used for identity theft or account takeover if the data later circulates. Even without immediate evidence of misuse, the existence of an unverified claim creates uncertainty that affected clients must manage over time.
For the firm, the listing adds to the operational and compliance workload already associated with any ransomware event, including potential regulatory review and the need to assess notification obligations under state and federal financial-privacy statutes.
If your data was in this claimed breach
Begin by reviewing account statements and credit reports for any unfamiliar activity. Contact the financial institutions that hold your accounts to ask about additional monitoring options or replacement of access credentials. Keep records of any correspondence with Lincoln Investment Planning regarding the incident.
Readers can also run a free exposure scan of their email address against known breach data sets to check whether their information has appeared in previously disclosed incidents.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
C..er CPA Listed by SilentRansomGroup Ransomware GroupPlaza Home Mortgage Listed by SilentRansomGroup Ransomware GroupMarshall & Stevens, Valuescope Listed by SilentRansomGroup Ransomware GroupHEMIC - Hawaii Employers' Mutual Insurance Co Listed by SilentRansomGroup Ransomware GroupLatest breaches
Publicly posted by silentransomgroup — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.