MalwareRansomwareData EncryptedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICCREDENTIALSFINANCIAL_ACCOUNTHEALTH_BASICBIOMETRICMediumContained

ARTHUR J. GALLAGHER & CO.

bd_4286fe2af33debe1 · schema v1 · pii pii-v1

Full breach record for ARTHUR J. GALLAGHER & CO. →

Arthur J. Gallagher & Co. reported a ransomware incident detected on September 26, 2020, affecting internal systems between June 3 and September 26, 2020. The breach compromised sensitive data including SSNs, driver's licenses, financial account info, medical records, and biometric data. The company engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.

This filing is one of 21 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

bd_367230a44c0b4f07South Carolina State AGfiled 2021-08-04(16d gap)Verified
bd_98f9af366bf05501Delaware State AGfiled 2021-08-12(24d gap)Verified
bd_46c22c0e135074c1South Carolina State AGfiled 2021-08-17(29d gap)Verified
bd_4802bf691a0b05cfDelaware State AGfiled 2021-08-17(29d gap)Verified

Show 6 more filings ↓up to 73d gap

bd_5a60d99cfc68d2f6South Carolina State AGfiled 2021-08-17(29d gap)Verified
bd_d8eb454e54010120South Carolina State AGfiled 2021-08-17(29d gap)Verified
bd_d559ecce5b338533Delaware State AGfiled 2021-08-19(31d gap)Verified
bd_e05a56a536c799ddNew Hampshire State AGfiled 2021-09-07(50d gap)Verified
bd_e1bf416a552091dfSouth Carolina State AGfiled 2021-09-08(51d gap)Verified
bd_97dcb7179082a9e8South Carolina State AGfiled 2021-09-30(73d gap)Verified

Showing first 10 of 20 linked disclosures.

Source provenance

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/ArthurJGallagher.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 19, 2021
Raw hash: b90df8dafb0c25323b858527a3add63dd8ff912c5cded082e44e9016345330fe

Reporting entity

Name: ARTHUR J. GALLAGHER & CO.
norm: arthur j gallagher

Victim entity

Name: ARTHUR J. GALLAGHER & CO.
norm: arthur j gallagher

Incident

Discovered: Sep 26, 2020
Materiality determined: Jun 30, 2021
Notification sent: Jun 30, 2021
Affected individuals: Not disclosed
Data types: IDENTITY_GOVERNMENTIDENTITY_BASICCREDENTIALSFINANCIAL_ACCOUNTHEALTH_BASICBIOMETRIC
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported incident to law enforcement and regulatory authorities

Compliance

Time to disclose: 42 weeks(296 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.