The Maryland Attorney General's office lists a data breach report from Lighthouse Electric Company, filed February 4, 2025. Companies in this situation send legally required notification letters to affected individuals — if you found Lighthouse Electric Company's letter in your mail, this page explains what it means and what you can do.
The Maryland Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Maryland Attorney General filing, the Lighthouse Electric Company incident compromised these categories of personal information:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Lighthouse Electric Company operates as a premier electrical contractor and industrial engineering services provider, managing complex infrastructure projects, commercial grid installations, and extensive residential developments throughout the Mid-Atlantic region. Because of the sophisticated nature of their operations, the company functions as a central repository for vast quantities of highly sensitive personal and professional data. To successfully manage a large workforce of specialized electricians, project managers, and administrative personnel, alongside numerous subcontractors and corporate clients, Lighthouse Electric maintains comprehensive internal systems containing deep personnel files, payroll records, and sensitive corporate proprietary data.
In 2025, Lighthouse Electric Company formally reported a significant data security incident to the Office of the Attorney General for the State of Maryland, alerting affected individuals that their private information may have been compromised. While the full mechanics of the intrusion are still under investigation, incidents affecting industrial contractors and service providers typically involve sophisticated cyberattacks such as unauthorized access to internal human resources databases, ransomware deployments, or compromised third-party vendor network portals. These vectors frequently allow malicious actors to quietly traverse corporate networks, extracting substantial volumes of confidential data before detection occurs.
The exposure resulting from this breach presents severe, multi-faceted risks to current and former personnel, subcontractors, and associated individuals whose records were stored within the company's network. The compromised information routinely includes core identifiers such as Full Names, Social Security Numbers, Dates of Birth, Home Addresses, direct deposit banking details, and comprehensive wage and tax compensation records. When Social Security numbers and financial account details are leaked into the public sphere, victims face an immediate and elevated threat of identity theft, fraudulent tax filings, unauthorized credit card applications, and direct financial account takeover. The malicious exploitation of these credentials can disrupt financial stability for years, requiring ongoing credit monitoring and intensive remediation efforts.
Under applicable state and federal data protection standards, including the Maryland Personal Information Protection Act (MPIPA) and established common law principles, corporate employers and contractors like Lighthouse Electric Company have a strict legal duty to implement and maintain reasonable and appropriate security measures to safeguard sensitive personal information. This encompasses utilizing robust encryption protocols, maintaining up-to-date network firewalls, conducting regular vulnerability assessments, and properly vetting third-party software integrations. The occurrence of a data breach of this scale strongly suggests potential failures in upholding these foundational cybersecurity obligations, leaving internal systems vulnerable to unauthorized intrusion and exploitation.
Receiving an official data breach notification letter from Lighthouse Electric Company serves as formal legal acknowledgment that your private, sensitive data was compromised due to inadequate corporate security safeguards. Under current legal standards, the receipt of this notice establishes the concrete injury and legal standing required to participate in a class action lawsuit aimed at holding the company accountable. Importantly, affected individuals do not need to demonstrate actual financial loss or identity theft to seek legal recourse; the increased risk of future harm alone is sufficient. Our law firm handles these complex data privacy cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Lighthouse Electric Company
You were a customer, patient, employee, or client of Lighthouse Electric Company
Your personal information was stored in Lighthouse Electric Company's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Keep the Lighthouse Electric Company letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Lighthouse Electric Company typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Claims windows close. Our team reviews Lighthouse Electric Company breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
An unauthorized party accessed Lighthouse Electric Company systems that stored personal information.
Reported to Attorney General
February 4, 2025
Lighthouse Electric Company's disclosure was logged with the Maryland Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to Lighthouse Electric Company letter recipients — the exact mix depends on state law and the data types exposed:
States like Maryland may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maryland's Personal Information Protection Act (PIPA) requires companies to implement reasonable security measures. Violations can support statutory damages claims even without proof of financial harm.
The companies below also filed breach notices with the Maryland Attorney General. Letter recipients for any of them can pursue a review.
Lyon Management Group, Inc.
Maryland · Jan 2025
Cabrillo College
Maryland · Feb 2025
Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
Maryland · Feb 2025
Ott Cone & Redpath, P.A.
Maryland · Jan 2025
ChurchShield
Maryland · Jan 2025
lannuzzi Manetta & Company P.C.; lannuzzi & Darling
Maryland · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris