2020-09-28 Arthur J. Gallagher & Co. Cybersecurity Incident

Page last updated on February 20, 2026

Arthur J. Gallagher & Co. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2020-09-28 17:00:01 EDT.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: Unknown
Detected Date: Unknown
Disclosure Date: Unknown
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: No Attack Tactics Tracked (yet)
Attack Techniques¹: No Attack Techniques Tracked (yet)

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2020-09-28

Arthur J. Gallagher & Co. filed an 8-K at 2020-09-28 17:00:01 EDT
Accession Number: 0001193125-20-256709

Item 7.01 Regulation FD Disclosure.

On September 26, 2020, Arthur J. Gallagher & Co. (the "Company") detected a ransomware incident impacting a limited portion of our internal systems. We promptly took all of our global systems offline as a precautionary measure, initiated response protocols, launched an investigation, engaged the services of external cybersecurity and forensics professionals, and implemented our business continuity plans to minimize disruption to our customers.

As of the date hereof, we have restarted or are in the process of restarting most of our business systems. Although we are in the early stages of assessing the incident, based on the information currently known, we do not expect the incident to have a material impact on our business, operations or financial condition.

The information furnished in Item 7.01 of this Form 8-K attached hereto shall not be deemed "filed" for purposes of Section 18 of the Securities Exchange Act of 1934 (the "Exchange Act") or otherwise subject to the liabilities of that section, nor shall it be deemed incorporated by reference in any filing under the Securities Act or the Exchange Act, except as expressly set forth by specific reference in such a filing.

Company Information