Exploit: Ransomware
Company: Arthur J. Gallagher
Industry: Insurance
Source: https://www.bleepingcomputer.com/news/security/us-insurance-giant-ajg-reports-data-breach-after-ransomware-attack/

Data Breach Notification letters are being mailed to individuals that may have been impacted in a Ransomware attack on insurance brokerage and risk management firm, Arthur J. Gallagher.

A company spokesperson announced they are "Working with the cybersecurity and forensic specialists to determine what may have happened and what information may have been affected, we determined that an unknown party accessed or acquired data contained within certain segments of our network between June 3, 2020, and September 26, 2020.”

The organization has not mentioned how the attack was carried out or whether threat actors had access to the network during the entire span or simply penetrated the network on separate occasions. The company did state they “promptly took all of our global systems offline as a precautionary measure, initiated response protocols, launched an investigation, engaged the services of external cybersecurity and forensics professionals, and implemented our business continuity plans to minimize disruption to our customers.”

Ensuing investigations have shown that exposed data may include PII such as social security numbers or tax ID numbers, driver’s license numbers, username and passwords, employee ID numbers, financial account or credit card info, electronic signature, medical treatment, health insurance information, biometric information and more.

Data regulatory authorities and all potentially impacted individuals are now being notified by the company. They are also warning those affected of identity theft risks and to closely monitor accounts and credit reports.

Find out how we can help you defend your business against modern cyber threats.

More than ever, companies of all sizes have been facing a historical rise in malicious data breaches and Ransomware. Talk to a cyber security expert today and find out how we can provide expert consulting and a portfolio of Cyber Security solutions designed to protect your organization against today’s most prevalent threats.