HackingProfessional ServicesFinancial ServicesProfessional ServicesData MishandlingCustomer Data InvolvedMulti-Stage ChainPIIMediumActive

ARTHUR J. GALLAGHER & CO.

bd_7a32a3fe8539d619 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 23, 2021

To disclose

—

Affected

1,222state residents only

Linked

30 filings

Confidence

68%

Full breach record for ARTHUR J. GALLAGHER & CO. →31 incidents on file

Arthur J. Gallagher & Co. filed a supplemental data event notice with the New Hampshire Attorney General on August 23, 2021. The notice covers approximately 1,222 New Hampshire residents affected by a data incident involving multiple insurance clients. Notification was mailed on August 17, 2021, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Aug 23, 2021

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 30 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Delaware State AGbd_d559ecce5b3385332021-08-19 · +4dVerified
South Carolina State AGbd_46c22c0e135074c12021-08-17 · +6dVerified
Delaware State AGbd_4802bf691a0b05cf2021-08-17 · +6dVerified
South Carolina State AGbd_5a60d99cfc68d2f62021-08-17 · +6dVerified

Show 6 more filings ↓up to 42d gap

South Carolina State AGbd_d8eb454e540101202021-08-17 · +6dVerified
New Hampshire State AGbd_e05a56a536c799dd2021-09-07 · +15dVerified
South Carolina State AGbd_e1bf416a552091df2021-09-08 · +16dVerified
New Hampshire State AGbd_128a2682206fdf792021-09-13 · +21dVerified
South Carolina State AGbd_97dcb7179082a9e82021-09-30 · +38dVerified
New Hampshire State AGbd_544b44357c05bc6c2021-10-04 · +42dVerified

Showing first 10 of 29 linked disclosures.

Name: ARTHUR J. GALLAGHER & CO.
norm: arthur j gallagher

Name: ARTHUR J. GALLAGHER & CO.
norm: arthur j gallagher
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Aug 17, 2021
Affected individuals: 1,222state-resident count only
Data types: PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Supplemental Notice of Data Event to New Hampshire Attorney General

During the incident: Mailing notice to additional affected individuals
Making identity and credit monitoring services available
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 3 states

View merged incident ↗

South Carolina State AGAug 17 · first

Delaware State AGAug 17 · first

South Carolina State AGAug 17 · first

Delaware State AG+2d

New Hampshire State AG+6d · this page

New Hampshire State AG+21d

South Carolina State AG+22d

New Hampshire State AG+27d

South Carolina State AG+44d

New Hampshire State AG+48d

Pattern: first filing Aug 17 (SC), last Oct 4 (NH) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 29 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/arthur-j-gallagher-20210823.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2021
Raw hash: ec13176026bb5c51acf5a0d886916edf8a0fbd6d5654ca899beeabbe3341eb2b

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityARTHUR J. GALLAGHER & CO.

Victim entityARTHUR J. GALLAGHER & CO.

IncidentThird-Party / Supply Chain

Stated responseMailing notice to additional affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov