Aon

Better Decisions - Commercial Risk - Health - Reinsurance - Wealth - Aon

aon.com

Aon Plc experienced a prolonged external system breach, lasting from December 29, 2020, to March 1, 2022. The incident was discovered on February 25, 2022. It affected 153,784 individuals, compromising names combined with driver's license or non-driver identification card numbers. In response, Aon offered 24 months of identity theft protection and credit monitoring services from Experian.

Aon Plc, a professional services firm, reported an external system breach that occurred on December 29, 2020, but was not discovered until February 25, 2022. The incident, described as hacking, affected 145,889 individuals and compromised names along with driver's license or non-driver ID numbers. The company began notifying affected individuals on May 27, 2022, and offered 24 months of complimentary credit monitoring and identity theft protection services through Experian.

Supplemental notice from Aon Corporation PLC to New Hampshire AG regarding a cyber event involving third-party vendor Ricoh USA Inc. Notifying 624 New Hampshire residents. Initial notice sent May 26, 2022.

Aon PLC, an insurance broker for Danaher, disclosed a breach where an unauthorized third party accessed systems between Dec 2020 and Feb 2022. Data included SSNs, DOBs, and health coverage info. 34 NH residents notified. Aon engaged FBI and forensic firms, enhanced security controls, and offered credit monitoring.

Aon PLC disclosed a cyber incident where an unauthorized third party accessed systems between Dec 29, 2020, and Feb 26, 2022. Personal information including names and SSNs was obtained. Aon engaged forensic firms and notified the FBI. Affected individuals were offered 24 months of credit monitoring.

Aon Corporation PLC notified the New Hampshire Attorney General of a cyber event affecting approximately 233 NH residents. Unauthorized access occurred between Dec 29, 2020, and Feb 26, 2022, exploiting a zero-day vulnerability (CVE-2021-27852). The attacker staged and exfiltrated unstructured data from SharePoint and Outlook, including names, SSNs, and driver's license numbers. Aon settled with the attacker, who deleted the data. Aon provided 24 months of credit monitoring and enhanced security controls.

Aon Plc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-12-29 and was reported on 2022-05-27. 3,080 Indiana residents were affected. 31,799 individuals affected in total.

Aon PLC reported to HHS on 2022-05-26 a Hacking/IT Incident affecting 129,682 individuals. Breached information located on Network Server. The incident involved ransomware encrypting PHI including names, DOBs, SSNs, and driver's license numbers.

Aon Plc reported a data breach to the Oregon Attorney General. The breach was reported on 2022-05-26. The breach occurred during 12/29/2020 - 3/1/2022. The breach was discovered on 2/25/2022. 31,799 individuals were affected. Notice was sent on 5/27/2022.

Aon PLC disclosed a cyber incident where an unauthorized third party accessed systems between Dec 29, 2020, and Feb 26, 2022. The incident was discovered on Feb 25, 2022. Personal information including names, SSNs, driver's license numbers, and some benefit enrollment data was temporarily obtained. Aon engaged cybersecurity firms, notified the FBI, and offered 24 months of identity monitoring.

Aon Plc, a financial services company, reported an external system breach that affected 31,799 individuals. The incident occurred between December 29, 2020, and March 1, 2022, and was discovered on February 25, 2022. The compromised data included names combined with driver's license or non-driver identification card numbers. Aon provided affected individuals with written notification and offered 24 months of complimentary identity theft protection and credit monitoring services.

Aon Corporation PLC disclosed a cyber event where an unauthorized third party exploited a zero-day vulnerability (CVE-2021-27852) to gain access to systems between Dec 2020 and Feb 2022. The actor staged and exfiltrated unstructured data containing PII (names, SSNs, driver's licenses). Aon reported to law enforcement, engaged forensic experts, and notified 3,328 Washington residents, offering 24 months of credit monitoring.

Aon PLC disclosed a cyber incident where an unauthorized third party accessed systems between Dec 29, 2020, and Feb 26, 2022. Personal information including names, SSNs, and driver's licenses was obtained. Aon detected the incident on Feb 25, 2022, engaged forensic firms, notified the FBI, and offered 24 months of credit monitoring. No evidence of misuse was found.

Aon Plc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-26. 648 Massachusetts residents were affected. The report records the breach type as electronic.

Aon Insurance Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-08-14. 1 Massachusetts residents were affected. The report records the breach type as paper.

Aon Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-03-10. 2 Massachusetts residents were affected. The report records the breach type as paper.

Aon Corp. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-10-15. 1 Massachusetts residents were affected. The report records the breach type as undefined.

Aon Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-07-10. 2 Massachusetts residents were affected. The report records the breach type as electronic.

AON Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-09-17. 45 Massachusetts residents were affected. The report records the breach type as electronic.

Aon Hewitt, a vendor for The Bank of Tokyo-Mitsubishi UFJ Ltd., inadvertently emailed a file containing names and SSNs of 1,246 Bank of Tokyo employees to two individuals in another client's HR department on August 2, 2013. The error was detected on August 6, 2013. Notifications were mailed on September 3, 2013, offering one year of credit monitoring. 2 New Hampshire residents were affected.

Aon Consulting, a business associate, prepared a request-for-proposal document for a covered entity's vision benefit program that mistakenly included PHI of 22,642 individuals. The document was publicly posted online for five days. Breached information located on a Network Server. PHI exposed included Social Security numbers, dates of birth, gender, zip codes, and vision plan enrollment information. The covered entity implemented multi-layer review controls and enforced its BAA with Aon; Aon offered credit monitoring and identity theft insurance to affected individuals.

Aon Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-06-20. 3,694 Massachusetts residents were affected. The report records the breach type as electronic.

Aon Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-04-15. 1 Massachusetts residents were affected. The report records the breach type as paper.