MARSH & MCLENNAN COMPANIES, INC.
bd_fa303094cee7b57b · schema v1 · pii pii-v1
Full breach record for MARSH & MCLENNAN COMPANIES, INC. →6 incidents on fileMarsh McLennan notified individuals that an unauthorized actor exploited a vulnerability in a third-party software provider's system to access a limited set of data in Marsh McLennan's environment. The unauthorized access occurred between April 22 and April 30, 2021, and was discovered on April 26, 2021. Affected data included names and other personal information. Marsh McLennan terminated the actor's access, reset administrator rights, and offered two years of complimentary credit monitoring through Experian.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 22, 2021
Begins
Apr 26, 2021
Discovered
Jun 30, 2021
Filed
vs. sector median
10 wks faster
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Washington State AGbd_5f0d93b73a89ebf12021-06-30Candidate
- Indiana State AGbd_6e3adec13e9426862021-06-30Verified by operator
- New Hampshire State AGbd_7ce38a76e14396742021-06-30Verified
- Montana State AGbd_983239faa83781892021-06-30Verified
Show 4 more filings ↓Show fewer ↑up to 183d gap
- South Carolina State AGbd_f54cc90d7abb48352021-06-30Verified
- Oregon State AGbd_e9678b0aaa98aeb82021-07-01 · +1dVerified
- Massachusetts State AGbd_84205fabab6f7b632021-07-06 · +6dVerified by operator
- Maine State AGbd_8767e869d58fdbbb2021-12-30 · +183dVerified
Filing propagation · 9 filings · 9 states
View merged incident ↗Pattern: first filing Jun 30 (WA), last Dec 30 (ME) — a 183-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.