Arthur J. Gallagher & Co. Data Breach

NOTICE: If you received a NOTICE OF DATA BREACH from Arthur J. Gallagher & Co. (“AJG”), contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options.

AJG data breachOn September 26, 2020, Arthur J. Gallagher Co. (“AJG”) detected an apparent ransomware attack on the AJG internal network. AJG immediately began to investigate the situation by taking their global systems offline and launched an investigation with the assistance of a third-party. On May 24, 2021, it was concluded that certain information was taken from AJG’s internal network by an unauthorized party.

AJG continued to work through June 23, 2021 to notify its business partners and to obtain address information for impacted individuals in order to provide notice to affected individuals.

Finally, almost a year after the attack took place, on June 30, 2021, AJG reported to the California Attorney General’s office that between June 30, 2020 and September 26, 2020, an unauthorized party gained access to AJG’s internal network and gained access to certain individuals’ information.

WHAT INFORMATION WAS INVOLVED?

On June 30, 2021, AJG began providing written notice to individuals notifying them of the Data Breach. The letters include the following affected information:

  • First and last name
  • Social Security Number
  • Tax Identification Number
  • Driver’s License
  • Passport
  • Government Identification Number
  • Date of Birth
  • Username and password
  • Employee Identification Number
  • Financial Account Information
  • Credit Card Information
  • Electronic signature
  • Medical Treatment, Claim, Diagnosis or other medical information
  • Health Insurance Information
  • Medical Record Numbers
  • Patient Account Numbers
  • Biometric Information

Headquartered in Rolling Meadows, Illinois, Arthur J. Gallagher & Co. is one of the largest US-based global insurance brokerage, risk management and HR & benefits consulting firms in the world. AJG and its 34,000 team members have operations that span to 49 countries. The company’s global network provides services in more than 150 countries.

According to AJG, they are still assessing the extent of the attack and will be providing affected individuals with a data breach letter. At this time, it is unclear how many letters are expected to go out. AJG is warning affected individuals of identity theft risks and recommends keeping an eye out for unusual activity on their account statements and credit reports.

NOTICE: If you received a NOTICE OF DATA BREACH from Arthur J. Gallagher, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options.