HackingDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTCritical
Aon
bd_ee7cfc9886fcd713 · schema v1 · pii pii-v1
Full breach record for Aon →Aon Plc, a professional services firm, reported an external system breach that occurred on December 29, 2020, but was not discovered until February 25, 2022. The incident, described as hacking, affected 145,889 individuals and compromised names along with driver's license or non-driver ID numbers. The company began notifying affected individuals on May 27, 2022, and offered 24 months of complimentary credit monitoring and identity theft protection services through Experian.
Maine clockDiscovered Feb 25, 2022 → Filed with AG Jun 24, 2022119d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_d4e9fb69d737f7a6Leak Sitedispossessorfiled 2022-07-03(9d gap)Verified
Regulatory filings (5) · sorted by filing gap
- bd_83344b1fed7fdb7aMaine State AGfiled 2022-07-01(7d gap)Candidate
- bd_a34b45e6fa897e08Oregon State AGfiled 2022-05-26(29d gap)Verified
- bd_a3a4b3bd3ddac8fcCalifornia State AGfiled 2022-05-26(29d gap)Verified
- bd_bdef13158191852dMaine State AGfiled 2022-05-26(29d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 29d gap
- bd_bf4952e393f83732Washington State AGfiled 2022-05-26(29d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d3a2cb3e-eab7-4cae-a857-16c532024b6d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 24, 2022
- Raw hash
- 55b4c3d2844ee7363bb5e81e8155db1821ce67e6e81da487c5f05a4653aabd69
Reporting entity
- Name
- Aonnorm: aon
- Domain
- aon.com
Victim entity
- Name
- Aonnorm: aon
- Domain
- aon.com
Incident
- Discovered
- Feb 25, 2022
- Materiality determined
- —
- Notification sent
- May 27, 2022
- Affected individuals
- 145,889
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- ME AG >90d · 119dME resident >60d · 91d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 25, 2022→ Filed with AG: Jun 24, 2022119d 90 days ME AG >90d Maine Discovered: Feb 25, 2022→ Notified: May 27, 202291d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.