MalwareRansomwareData ExfiltratedData EncryptedDelayed DiscoveryPIIIDENTITY_BASICLowContained
ARTHUR J. GALLAGHER & CO.
bd_d803a85bda006f93 · schema v1 · pii pii-v1
Full breach record for ARTHUR J. GALLAGHER & CO. →Arthur J. Gallagher & Co. disclosed a ransomware incident affecting internal systems between June 3, 2020, and September 26, 2020. The company took systems offline, engaged forensic specialists, and confirmed the exposure of personal information (PII) belonging to certain individuals. The breach was discovered on September 26, 2020, and notifications were sent in July 2021. Affected data included names and other personal identifiers. The company provided 24 months of credit monitoring via Kroll.
This filing is one of 21 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_367230a44c0b4f07South Carolina State AGfiled 2021-08-04(35d gap)Verified
- bd_98f9af366bf05501Delaware State AGfiled 2021-08-12(43d gap)Verified
- bd_46c22c0e135074c1South Carolina State AGfiled 2021-08-17(48d gap)Verified
- bd_4802bf691a0b05cfDelaware State AGfiled 2021-08-17(48d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 92d gap
- bd_5a60d99cfc68d2f6South Carolina State AGfiled 2021-08-17(48d gap)Verified
- bd_d8eb454e54010120South Carolina State AGfiled 2021-08-17(48d gap)Verified
- bd_d559ecce5b338533Delaware State AGfiled 2021-08-19(50d gap)Verified
- bd_e05a56a536c799ddNew Hampshire State AGfiled 2021-09-07(69d gap)Verified
- bd_e1bf416a552091dfSouth Carolina State AGfiled 2021-09-08(70d gap)Verified
- bd_97dcb7179082a9e8South Carolina State AGfiled 2021-09-30(92d gap)Verified
Showing first 10 of 20 linked disclosures.
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/07/AJG-Data-Breach-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2021
- Raw hash
- 1cc89dc9f73ad62bbe92c8eb3cad99178dc656d23220e5421629a58c4528a35d
Reporting entity
- Name
- ARTHUR J. GALLAGHER & CO.norm: arthur j gallagher
Victim entity
- Name
- ARTHUR J. GALLAGHER & CO.norm: arthur j gallagher
Incident
- Discovered
- Sep 26, 2020
- Materiality determined
- —
- Notification sent
- Jul 1, 2021
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to law enforcement and regulatory authorities
Compliance
- Time to disclose
- 40 weeks(277 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.