F500 Financial Svcs Remainder · Diversified Financials · Private litigation + Data breach
Arthur J. Gallagher
Headline
No new 2025-2026 matter confirmed this pass, but an earlier breach is documented.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
No new 2025-2026 matter confirmed this pass, but an earlier breach is documented. Gallagher is an insurance broker and benefits consultant handling employee benefits data on behalf of employers - the same no-relationship structure as Marsh & McLennan and ADP. Gallagher disclosed a ransomware attack detected September 26, 2020 (intrusion beginning June/July 2020); its 2021 breach notifications to the Maine Attorney General were reported to rise to 722,325 affected individuals across successive filings, and a proposed class action followed. Recommend confirming the final total against the Maine AG filings before publishing.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for any direct retail account, where one exists.
Data sharing
See the 2020 ransomware breach and proposed class action in the headline (case name not confirmed this pass); most large investment banks/asset managers/insurance-brokers primarily serve institutional clients (corporations, other financial institutions, government-sponsored entities) rather than individual retail consumers directly, meaning direct consumer Terms of Service exposure is limited or nonexistent for most of this group. Fannie Mae and Freddie Mac specifically are GOVERNMENT-SPONSORED ENTERPRISES that purchase mortgages from lenders rather than dealing with homeowners directly — most consumers have no direct account relationship with either.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy See Arthur J. Gallagher's own published privacy policy | Not fetched yet | NOT CONFIRMED |
| Terms of service See Arthur J. Gallagher's own published terms of service | Not fetched yet | NOT CONFIRMED |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.