Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Ryan Specialty Group, LLC
bd_70d3ae0ea00b12ef · schema v1 · pii pii-v1
Full breach record for Ryan Specialty Group, LLC →Ryan Specialty Group, LLC reported an unauthorized access to employee email accounts occurring between April 4 and April 20, 2021. The breach was discovered on April 17, 2021, and notification letters were sent on July 30, 2021. The incident involved phishing leading to credential compromise. Affected data included names and other personal information accessible within the compromised accounts. RSG reset passwords, blocked malicious IPs, and offered 24 months of credit monitoring via Experian.
California clockDiscovered Apr 17, 2021 → Notified Jul 30, 2021104d ✗ CA 60-day late15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-543396
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 30, 2021
- Raw hash
- 5ba9f67ef567cbc42740a0839fb6da0857b3ebb75483578a56222c7ff6c5e101
Reporting entity
- Name
- Ryan Specialty Group, LLCnorm: ryan specialty
Victim entity
- Name
- Ryan Specialty Group, LLCnorm: ryan specialty
Incident
- Discovered
- Apr 17, 2021
- Materiality determined
- —
- Notification sent
- Jul 30, 2021
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(104 days from discovery to filing)
- Compliance flags
- CA 60-day late · 104d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 17, 2021→ Notified: Jul 30, 2021104d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.