UnknownMedium
Aon
bd_a34b45e6fa897e08 · schema v1 · pii pii-v1
Full breach record for Aon →Aon Plc reported a data breach to the Oregon Attorney General. The breach was reported on 2022-05-26. The breach occurred during 12/29/2020 - 3/1/2022. The breach was discovered on 2/25/2022. 31,799 individuals were affected. Notice was sent on 5/27/2022.
Oregon clock✗ OR AG >45d13 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_d4e9fb69d737f7a6Leak Sitedispossessorfiled 2022-07-03(38d gap)Verified
Regulatory filings (5) · sorted by filing gap
- bd_a3a4b3bd3ddac8fcCalifornia State AGfiled 2022-05-26Verified
- bd_bdef13158191852dMaine State AGfiled 2022-05-26Candidate
- bd_bf4952e393f83732Washington State AGfiled 2022-05-26Verified
- bd_ee7cfc9886fcd713Maine State AGfiled 2022-06-24(29d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 36d gap
- bd_83344b1fed7fdb7aMaine State AGfiled 2022-07-01(36d gap)Candidate
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2022
- Raw hash
- 1340f20aa05262cc1f9815310f1e14030cd6308d7d488d18f6d0c146d7cab9f4
Reporting entity
- Name
- Aonnorm: aon
- Domain
- aon.com
Victim entity
- Name
- Aonnorm: aon
- Domain
- aon.com
Incident
- Discovered
- Feb 25, 2022
- Materiality determined
- —
- Notification sent
- May 27, 2022
- Affected individuals
- 31,799
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- OR AG >45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.