Arthur J. Gallagher

Disclosed Jun 30, 20215 years ago90,240 affectedConfirmed

What is known

People affected	90,240 (as reported by the organization)
Disclosed	Jun 30, 2021
Discovered	Sep 26, 2020
Happened	Jul 2, 2020
Attack	Ransomware
Data exposed	Names, Health, Insurance, Credentials and tokens
Sector	Tech · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Arthur J. Gallagheroag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Arthur J. Gallagheratg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: Arthur J. Gallagherattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: Arthur J. Gallagherjustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2021 data breach report: Arthur J. Gallagherin.gov · Official notice	Official notice

Where	Filed	People
California AGresidents of CA	Jun 30, 2021
Delaware DOJresidents of DE	Jun 30, 2021	935
Indiana AGresidents of IN	Jun 30, 2021	26,307
Oregon DOJresidents of OR	Jul 8, 2021	90,240
Washington AGresidents of WA	Jul 13, 2021	72,378

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Nov 26, 2019Nov 26, 20196 years ago	Nov 26, 20196 years ago	Not stated	Tech	Confirmed	3,330

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/Data-Breach-Year-to-date-Report-2021-1.pdf · backfill source
2026-09-25 · data_types: [] to ["names","health","insurance","credentials"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 90240 · backfill source
2026-09-25 · attack: unknown to ransomware · backfill source
2026-09-25 · discovered: empty to 2020-09-26 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.