MARSH & MCLENNAN COMPANIES, INC.
bd_fa303094cee7b57b · schema v1 · pii pii-v1
Full breach record for MARSH & MCLENNAN COMPANIES, INC. →7 incidents on fileMarsh McLennan notified individuals that an unauthorized actor exploited a vulnerability in a third-party software provider's system to access a limited set of data in Marsh McLennan's environment. The unauthorized access occurred between April 22 and April 30, 2021, and was discovered on April 26, 2021. Affected data included names and other personal information. Marsh McLennan terminated the actor's access, reset administrator rights, and offered two years of complimentary credit monitoring through Experian.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 22, 2021
Begins
Apr 26, 2021
Discovered
Jun 30, 2021
Filed
vs. sector median
9 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Washington State AGbd_5f0d93b73a89ebf12021-06-30Candidate
- New Hampshire State AGbd_7ce38a76e14396742021-06-30Verified
- Montana State AGbd_983239faa83781892021-06-30Verified
- South Carolina State AGbd_f54cc90d7abb48352021-06-30Verified
Show 2 more filings ↓Show fewer ↑up to 183d gap
- Oregon State AGbd_e9678b0aaa98aeb82021-07-01 · +1dVerified
- Maine State AGbd_8767e869d58fdbbb2021-12-30 · +183dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Jun 30 (WA), last Dec 30 (ME) — a 183-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.