Lincoln Retirement Services Breach: What Retirees Should Do

A Retirement Breach Lands on the People Brokers Already Know Best

The usual story about older people and scams is that they get targeted because they’re trusting or not tech-savvy. That’s mostly wrong, and it lets the real problem off the hook.

The actual reason is simpler: a 70-year-old has a data trail that’s been compiling for fifty years. Decades of addresses, property records, voter rolls, phone numbers, relatives, and accounts opened and forgotten. A 25-year-old has a thin file. A retiree has a biography.

A breach like Lincoln’s doesn’t create that exposure. It tops it up — dropping fresh, high-value pieces like a Social Security number and a financial account onto a profile that was already thick. And unlike a password, those pieces can’t be reset. Your name, birth date, and SSN don’t expire. They just keep resurfacing, breach after breach.

Find out how much of your personal data is already exposed online. Check for free with ClearNym.

The Numbers Almost No One Connects to a Breach

Here’s the part that rarely makes it into breach coverage. In 2025, Americans aged 60 and older reported $7.7 billion in losses to the FBI’s Internet Crime Complaint Center — up roughly 59% in a single year, and more than any other age group by a wide margin. More than 201,000 older adults filed complaints, the average reported loss topped $38,000, and over 12,400 seniors each lost more than $100,000.

The most common scam reported by older victims wasn’t a dramatic hack. It was phishing and spoofing — the convincing email, text, or phone call. And that is exactly where a breach like Lincoln’s does its damage. Leaked personal data is the raw material that makes those approaches believable.

A scam call lands very differently when the person on the line already knows your insurer, your address, or the last four of your SSN. That’s the quiet way breached data turns into stolen savings — not through one break-in, but through a profile that makes the next con sound legitimate. The kinds of scams it feeds:

• Government impersonation — a caller claiming to be from Social Security, Medicare, or the IRS, already armed with your real details and threatening lost benefits or arrest.
• Tech and customer support — “your account has been compromised,” followed by a request for remote access to your device.
• Grandparent and voice-clone scams — family names pulled from public records, sometimes paired with an AI-cloned voice, to manufacture a crisis.
• Investment and “advisor” pitches — aimed squarely at the largest pool of savings most people ever hold.

Why This Breach Can Reach the Whole Family

There’s another layer worth pulling out. Retirement records are relationship data. They name beneficiaries, spouses, and heirs.

Pair that with what data brokers already publish about a family, and the exposure doesn’t necessarily stop at the account holder. It can reach the adult children and the people set to inherit. The grandparent scam is the everyday version of this: a fraudster who knows a grandchild’s name and a few details can build a panic call in seconds.

We’re not saying that has happened to anyone in this breach. We’re saying it’s the kind of second-order effect a retirement breach makes possible in a way a leaked password never does.

Why Standard Breach Advice Falls Short for Retirees

When a breach hits, the standard advice is familiar: change your password, watch your statements for a month, take the free year of credit monitoring. That advice is built around account takeover. For a retiree, the bigger risk is impersonation built on real details — and most of the durable advice doesn’t touch it.

Standard breach advice	Why it falls short for a retiree
Change your password	Protects one login, not the SSN and account details already copied
Take the free year of credit monitoring	Alerts you after misuse; it doesn’t remove anything or stop a convincing call
Watch your bank statements	Catches account fraud, but misses scams built on your real personal details
“You’re fine if you don’t open new credit”	The bigger danger isn’t a new loan; it’s a caller who already knows you
Wait for the notification letter	Your data is usually already circulating before the envelope arrives

What To Do Right Now

You can’t un-leak a file that’s already out, but you can make yourself much harder to impersonate. Several of these steps are specific to retirees and free.

1. Freeze your credit at all three bureaus. Equifax, Experian, and TransUnion each do it free in minutes, and it stops most new-account fraud cold.
2. Block electronic access to your Social Security record. Call the SSA to stop anyone from viewing or changing it online – a strong move once your SSN is exposed.
3. Get an IRS Identity Protection PIN. A six-digit number from your account at IRS.gov that stops someone from filing a tax return in your name.
4. Treat “informed” contact as a red flag. A call that opens with details only you should know is what this leak enables. Hang up and call back on a number you find yourself.
5. Bring your family in. The exposure is shared, so help a parent or spouse set these up, and agree that no one moves money on an unexpected call.
6. Opt out of data-broker and people-search sites. The step almost no one takes, and the one that shrinks the profile so the next breach has less to attach to.

See where your personal data is already listed online – search free with ClearNym .

References

• Massachusetts Office of Consumer Affairs and Business Regulation — Data Breach Notification Report (Lincoln Retirement Services)
• FBI IC3 — 2025 Internet Crime Report (Elder Fraud)
• FBI — Scammers Target Older Adult Victims
• IRS — Get an Identity Protection PIN (IP PIN)
• Social Security Administration — Protect Your Social Security Number
• Federal Trade Commission — IdentityTheft.gov: Data Breach Recovery
• AnnualCreditReport.com — Free Credit Reports and Freezes
• ClearNym