Why not?
Why would it not be something targeting this person specifically? After all, he was investigating worker compensation fraud. That is bound to make him a few enemies and is all the more reason why his company should be sued for ruining his life without an adequate inquiry.
He simply is in a position whereby it would be reasonable to accomodate the possibility that he would be the victim of a targeted attack.
Also, tha laptop of an insurance invetigator should have been much more secure. The company is at fault on that front as well. It would contain a lot of very personal information about a lot of people.