← Gallagher

2020 Arthur J. Gallagher — ransomware; multi-month network access; large-scale class settlement

2020 Unknown records affected Share on X

Data compromised

SSN-class and benefits-adjacent HR data described in state sample notices—exact cohort sizes aggregated only in litigation marketing

Technical writeup

Insurance broker Arthur J. Gallagher & Co. issued state breach notifications for ransomware-related unauthorized access on its corporate network between June and September 2020, with South Carolina regulatory samples and trade press later contextualizing years-long class-action economics culminating in a multimillion-dollar settlement fund for affected individuals offered identity services.

Root cause

Human-operated ransomware deployment with prolonged dwell time (per attorney-general-filed consumer letters)

References