LifeLock

LifeLock is a United States identity-theft protection and identity-monitoring brand. It began in Tempe, Arizona, in 2005, co-founded by Robert J. Maynard Jr. and Todd Davis. The business was created around the idea that consumers needed an ongoing service to identify suspicious use of personal information, rather than relying only on banks, credit bureaus, or law-enforcement agencies after an incident had already occurred. The brand's services have centered on monitoring identity-related signals, warning customers about potentially fraudulent activity, assisting with identity restoration, and providing reimbursement or coverage subject to the terms of the applicable plan. Over time, its offerings expanded beyond basic identity-theft alerts to include credit monitoring, financial-account monitoring, alerts about changes in credit information, scam protection, and access to identity-restoration specialists. Package structures have included Core, Advanced, Total, Family, and higher-tier bundles incorporating Norton security products. LifeLock became well known for highly visible advertising, particularly a 2007 campaign in which co-founder and then chief executive Todd Davis publicly displayed his Social Security number. The campaign was intended to dramatize the risks of identity theft, but it also drew criticism and became part of the wider scrutiny of LifeLock's marketing claims. In 2010, the Federal Trade Commission imposed a $12 million penalty after alleging that earlier advertising gave consumers a misleading impression that LifeLock provided a comprehensive or guaranteed defense against identity theft. In 2015, the FTC obtained a further $100 million contempt-related penalty, alleging that the company had not complied with the security-program and advertising requirements of an earlier settlement; $68 million was designated for customer refunds through a related class-action process. The company pursued expansion through partnerships and acquisitions. It entered an arrangement with TransUnion in 2008 to automate customer credit-monitoring alerts, acquired ID Analytics in 2012 for identity-risk prediction capabilities, and acquired Lemon Wallet in 2013 for digital-wallet technology. LifeLock also raised substantial private capital before becoming a public company on the New York Stock Exchange in October 2012 under the symbol LOCK. Symantec acquired LifeLock in February 2017 for approximately $2.3 billion. LifeLock was subsequently marketed within the NortonLifeLock portfolio, and many LifeLock plans became bundled with Norton 360 security products. After Symantec's enterprise-security business was sold to Broadcom, the consumer-security company adopted the NortonLifeLock name in 2019. Following the merger with Avast, the parent company was renamed Gen Digital in 2022. LifeLock remains a consumer-facing brand within Gen's broader portfolio, although its corporate ownership and product presentation have evolved substantially since the independent company's public-market period.

LifeLock was founded in 2005 in Tempe, Arizona, by Robert J. Maynard Jr. and Todd Davis. Its initial proposition was to provide consumers with a dedicated identity-theft monitoring service capable of detecting suspicious use of personal information and helping customers respond to fraud. The company obtained seed funding of $2 million, followed by a $5 million Series A round in 2006 from Bessemer Venture Partners. It later raised additional private financing, including a $6 million Series B round in 2007, a $25 million Series C round in 2008, and a $40 million Series D round in 2009. The company's early public profile was shaped by aggressive advertising. Davis displayed his Social Security number in a 2007 campaign intended to demonstrate the risks of identity theft and promote LifeLock's service. The campaign attracted substantial attention and criticism. Maynard left the company in June 2007 after a Phoenix New Times report questioned aspects of claims surrounding his identity theft. Davis later said that the advertising was intended to highlight the risks created by data breaches. LifeLock expanded its monitoring infrastructure through commercial relationships and acquisitions. In 2008, it entered an agreement with TransUnion to automate credit-monitoring alerts. In 2009, following a settlement involving Experian and allegations concerning false fraud alerts, LifeLock introduced a service that did not depend solely on bureau fraud alerts. In 2012, the company acquired ID Analytics, an identity-risk prediction technology business, and raised $100 million in new equity funding to support the transaction and broader expansion. It also acquired Lemon Wallet, a digital-wallet platform, for $42.6 million in late 2013. Regulatory scrutiny became a defining part of LifeLock's corporate history. In March 2010, the Federal Trade Commission imposed a $12 million penalty, concluding that prior advertising could mislead consumers into believing that LifeLock offered a complete guarantee against identity theft. In 2015, the FTC pursued a contempt action related to the earlier settlement, alleging deficiencies in LifeLock's information-security program and continued misleading claims about protection of sensitive data. The resulting $100 million penalty included $68 million held for refunds to customers through a class-action process. LifeLock filed for an initial public offering in 2012 and began trading on the New York Stock Exchange on October 3 of that year under the symbol LOCK. Its independent public-company period ended when Symantec agreed to acquire it for approximately $2.3 billion. The transaction closed on February 9, 2017, and LifeLock became part of Symantec's consumer-security operations. The stock was voluntarily deregistered following the acquisition. After Symantec sold its enterprise-security division to Broadcom, the remaining consumer-security company changed its name to NortonLifeLock in November 2019. LifeLock products were increasingly presented alongside Norton offerings and bundled with Norton 360 plans. In 2022, the combination of NortonLifeLock and Avast produced Gen Digital, the current parent company. LifeLock continues to be marketed as an identity-protection brand within Gen's consumer-security portfolio. The brand has also faced technology-security incidents. A cross-site scripting vulnerability on a refer-a-friend page was disclosed in 2015 and the page was taken offline after notification. In 2018, a flaw in a third-party-managed unsubscribe page reportedly enabled enumeration of email addresses through a subscriber-key parameter. In December 2022, attackers used credentials obtained from unrelated breaches in a credential-stuffing attack affecting more than 6,000 accounts. These events illustrate the distinction between a security company's service claims and the need to secure its own customer-facing systems.

1. 2022Gen Digital formation

   The parent company adopted the Gen Digital name after the NortonLifeLock–Avast combination.

   Source
2. 2019NortonLifeLock rebranding

   The consumer-security parent adopted the NortonLifeLock name after Symantec's enterprise-business sale.

   Source
3. 2017Symantec acquisition

   Symantec acquired LifeLock for approximately $2.3 billion.

   Source
4. 2015FTC contempt penalty

   The FTC obtained a $100 million penalty concerning alleged violations of the 2010 settlement's security and advertising obligations.

   Source
5. 2013Lemon Wallet acquisition

   LifeLock acquired the Lemon Wallet digital-wallet platform.

   Source
6. 2012IPO and ID Analytics acquisition

   LifeLock acquired ID Analytics and began NYSE trading under LOCK.

   Source
7. 2010FTC advertising settlement

   The FTC imposed a $12 million penalty over allegedly deceptive identity-theft protection advertising.

   Source
8. 2008TransUnion monitoring agreement

   LifeLock entered an agreement with TransUnion to automate customer credit-monitoring alerts.

   Source
9. 2007High-profile Social Security number advertising campaign

   Todd Davis publicly displayed his Social Security number in advertising intended to promote LifeLock's identity-protection proposition.

   Source
10. 2005LifeLock is founded

    Robert J. Maynard Jr. and Todd Davis co-found LifeLock in Tempe, Arizona.

    Source

A consumer identity-protection service positioned around proactive monitoring, early warnings, fraud recovery assistance, and financial protection rather than conventional endpoint security alone.

• LifeLock Identity Theft ProtectionIdentity protection service

  LifeLock's core consumer service combines identity monitoring, alerts concerning possible misuse of personal information, credit and financial monitoring, identity-restoration assistance, and financial protection benefits subject to plan terms. The service is designed to help customers identify suspicious activity earlier and obtain assistance after an identity-theft event.

• LifeLock CoreIdentity protection plan

  The Core tier is designed for customers seeking basic identity-fraud recovery, monitoring, alerts, and access to identity-protection assistance. It is positioned toward consumers with relatively straightforward checking and savings relationships, while higher tiers extend monitoring and protection to more complex financial circumstances.

• LifeLock Advanced and TotalIdentity protection plans

  Advanced and Total plans build on the basic service with broader credit and financial monitoring, additional scam-protection features, and higher limits or benefits for identity-fraud recovery. The exact package structure and inclusions may vary as Gen updates its consumer offerings.

• LifeLock FamilyFamily identity protection

  The Family offering extends LifeLock protection to additional users, allowing a household to obtain identity monitoring, alerts, and recovery-related assistance under a family-oriented subscription structure.

• LifeLock and Norton 360 bundlesConsumer cybersecurity bundle2017

  Following the Symantec acquisition, LifeLock identity services were bundled with Norton security products, including Norton 360 packages. These combinations join identity monitoring and recovery benefits with device, privacy, and online-security features supplied by the Norton product family.

• ID AnalyticsIdentity-risk technology

  ID Analytics was acquired by LifeLock in 2012 and operated as a wholly owned subsidiary. Its identity-risk prediction capabilities were intended to support fraud and identity-risk assessment rather than function solely as a consumer subscription brand.

• 2007Todd Davis Social Security number campaign

  United States

  LifeLock used billboards and commercials displaying co-founder Todd Davis's Social Security number to dramatize the risks of identity theft and promote its monitoring service. The campaign generated broad attention and became closely associated with later criticism of the company's marketing claims.

  Outcome. High public visibility, followed by regulatory and reputational scrutiny.

  Source

• 2022Transition into Gen DigitalM&A

  The combination of NortonLifeLock and Avast created a broader consumer-cybersecurity group.

  What changed. The parent company adopted the Gen Digital name, with LifeLock remaining within its consumer brand portfolio.

  Aftermath. LifeLock's ownership became part of Gen's multi-brand structure alongside Norton and other consumer-security offerings.

  Source
• 2019Adopt NortonLifeLock corporate identityStrategy

  After Symantec sold its enterprise-security business to Broadcom, the remaining consumer-security operations required a new corporate identity.

  What changed. The parent company changed its name to NortonLifeLock and increasingly bundled LifeLock services with Norton offerings.

  Aftermath. LifeLock continued as a consumer-facing identity-protection brand rather than an independently listed company.

  Source
• 2017Sell LifeLock to SymantecM&A

  Symantec sought to expand its consumer-security portfolio with identity protection and monitoring services.

  What changed. Symantec acquired LifeLock for approximately $2.3 billion, ending LifeLock's independent public-company status.

  Aftermath. LifeLock was marketed alongside Norton products and later became part of the NortonLifeLock and Gen Digital consumer-security portfolios.

  Acquisition price. $2.3 billion (February 9, 2017)

  Source
• 2013Acquire Lemon WalletM&A

  LifeLock explored adjacent consumer financial and digital-wallet services.

  What changed. The company acquired Lemon Wallet for $42.6 million.

  Aftermath. The transaction added digital-wallet technology to LifeLock's portfolio, although the brand's principal identity remained identity protection and monitoring.

  Acquisition price. $42.6 million (Late 2013)

  Source
• 2012Acquire ID AnalyticsM&A

  LifeLock wanted stronger identity-theft risk prediction and fraud-analysis capabilities.

  What changed. It acquired ID Analytics and retained it as a wholly owned subsidiary.

  Aftermath. The acquisition broadened LifeLock's technology base beyond consumer alerts and supported identity-risk assessment.

  Source
• 2008Automate credit-monitoring alerts through TransUnionStrategy

  LifeLock sought to make credit-related identity monitoring more timely and systematic for subscribers.

  What changed. The company entered an agreement with TransUnion to automate customer credit-monitoring alerts.

  Aftermath. The arrangement expanded LifeLock's monitoring capabilities and was followed by continued diversification of its identity-risk services.

  Source

• 2022Credential-stuffing incidentControversy

  Attackers used credentials from unrelated breaches in a credential-stuffing attack against LifeLock accounts. More than 6,000 accounts reportedly had associated details disclosed, with notifications sent in January 2023.

  Source
• 2018Subscriber-key email exposureControversy

  A flaw on a marketing unsubscribe page reportedly allowed sequential subscriber-key values to be used to retrieve customer email addresses. The affected page was taken offline, and LifeLock characterized the issue as limited to a third-party-managed marketing page.

  Source
• 2015FTC contempt proceeding and security-program penaltyControversy

  The FTC obtained a $100 million penalty after alleging that LifeLock failed to maintain a comprehensive information-security program and falsely advertised the extent to which it protected sensitive consumer data. A substantial portion was held for customer refunds.

  Source
• 2015Refer-a-friend cross-site scripting vulnerabilityControversy

  Researchers disclosed a cross-site scripting flaw on a LifeLock refer-a-friend page that could have supported phishing or account-takeover attempts. LifeLock took the page offline after notification and stated that customer data had not been compromised.

  Source
• 2010FTC deceptive-advertising penaltyControversy

  The Federal Trade Commission imposed a $12 million penalty after alleging that LifeLock's advertising misled consumers about the scope of its protection and suggested an overly broad guarantee against identity theft.

  Source

• 2022NortonLifeLock adopts Gen Digital identity after Avast combination

  Following the combination of NortonLifeLock and Avast, the parent company changed its name to Gen Digital, while LifeLock continued as a consumer identity-protection brand.

  M&ALeadership change
  Source
• 2017LifeLock acquired by Symantec

  Symantec acquired LifeLock for approximately $2.3 billion, bringing the identity-protection business into its consumer-security portfolio.

  M&A
  Source
• 2012LifeLock acquires ID Analytics

  LifeLock acquired identity-risk prediction company ID Analytics to strengthen its ability to assess potential identity and fraud risks.

  M&A
  Source
• 2012LifeLock completes initial public offering

  LifeLock began trading on the New York Stock Exchange under the symbol LOCK on October 3, 2012.

  Other
  Source

1. LifeLock
2. LifeLock official website