AccidentalLossSupply Chain (3P Vendor)Employee Data InvolvedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
ARTHUR J. GALLAGHER & CO.
bd_73db9ee483fe9123 · schema v1 · pii pii-v1
Full breach record for ARTHUR J. GALLAGHER & CO. →Arthur J. Gallagher & Co. notified individuals that an outside law firm assisting with legal proceedings transferred data from an encrypted drive to an unencrypted hard drive and subsequently misplaced the drive while traveling. The incident was discovered on March 15, 2019. Affected data included names, dates of birth, and Social Security numbers. Gallagher engaged third-party investigators, notified regulators, and offered credit monitoring services. No evidence of data access or misuse was found.
California clockDiscovered Mar 15, 2019 → Notified Nov 1, 2019231d ✗ CA 60-day late38 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_07572055c336b929Montana State AGfiled 2019-11-26(10d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-184908
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 6, 2019
- Raw hash
- fb5d1c165d338764b707849e9a032d1d471433b68fb89206ffc430a190f28c93
Reporting entity
- Name
- ARTHUR J. GALLAGHER & CO.norm: arthur j gallagher
Victim entity
- Name
- ARTHUR J. GALLAGHER & CO.norm: arthur j gallagher
Incident
- Discovered
- Mar 15, 2019
- Materiality determined
- —
- Notification sent
- Nov 1, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Regulator citations
- Notifying regulatory authorities, as required by law
- Third party
- via Outside law firm
Compliance
- Time to disclose
- 38 weeks(266 days from discovery to filing)
- Compliance flags
- CA 60-day late · 231d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 15, 2019→ Notified: Nov 1, 2019231d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.