Lumara Bio USA Investigated Over Data Breach Exposing Employee Sensitive Information

Overview of the Security Incident

Lumara Bio USA, the Princeton-based oncology division of ITM Isotope Technologies Munich SE, is currently under investigation following a significant data breach. The parent company, ITM SE, detected unauthorized access to its IT systems on September 12, 2026. The incident prompted an immediate response, involving the isolation of affected systems and the engagement of external cybersecurity forensics experts.

Impact on Employees

On October 26, 2026, Lumara Bio USA began notifying current and former employees that their personal information may have been compromised. The scope of the exposed data includes:

• Social Security numbers
• Driver’s license numbers or government ID details
• Employment and salary records
• Financial account information

Legal Investigation

The national class action law firm Edelson Lechtzin LLP has announced an investigation into potential privacy claims. The firm is evaluating whether the company failed to adequately protect sensitive employee data. Potential litigation aims to recover compensation for affected individuals regarding identity theft risks, time lost, and financial damages.

Recommended Steps for Affected Individuals

If you were employed by Lumara Bio USA, legal and security experts suggest the following actions:

• Monitor Communications: Watch for the official mailed notice containing an activation code for 24 months of complimentary credit monitoring via Experian IdentityWorks.
• Secure Your Credit: Contact the three major bureaus (Equifax, Experian, TransUnion) to place a fraud alert or credit freeze.
• Verify Financial Records: Regularly review tax documents, bank statements, and credit reports for unauthorized activity.
• Report Fraud: Any suspicious activity should be reported to the Federal Trade Commission at IdentityTheft.gov.

Verification of the breach can be performed by reviewing official correspondence received from the company or by contacting the Massachusetts Attorney General's office where the incident was reported.