HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
ARTHUR J. GALLAGHER & CO.
bd_c453899ab04861cb · schema v1 · pii pii-v1
Full breach record for ARTHUR J. GALLAGHER & CO. →Arthur J. Gallagher & Co. reported an external system breach (hacking) occurring between June 3, 2020, and September 26, 2020, discovered on June 23, 2021. The incident affected 5,577 individuals, including 2 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification and offered 24 months of identity theft protection services via Kroll.
Maine clockDiscovered Jun 23, 2021 → Filed with AG Sep 8, 202177d ⏱ ME AG >30d11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b583961f-33ad-4ebe-b4fc-5b8cdd3076f0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 8, 2021
- Raw hash
- ee8f90dae9073f9698667b80237bd083122d6558c193a9494cb38fa1cb226bd3
Reporting entity
- Name
- ARTHUR J. GALLAGHER & CO.norm: arthur j gallagher
Victim entity
- Name
- ARTHUR J. GALLAGHER & CO.norm: arthur j gallagher
Incident
- Discovered
- Jun 23, 2021
- Materiality determined
- —
- Notification sent
- Jul 21, 2021
- Affected individuals
- 5,577
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- ME AG >30d · 77d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 23, 2021→ Filed with AG: Sep 8, 202177d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.