Gallagher Data Breach: What You Need to Know

  • By Farrukh Mushtaq

    Farrukh Mushtaq

    Author Image

    Farrukh Mushtaq, a digital marketer at PureSquare, possesses a keen interest in cybersecurity and enjoys writing about it. With several years of experience in the digital marketing industry, he brings expertise and passion to his work.

    See author profile
  • 11 February 2025
  • 12 mins read

Table of Content

Table of Contents

Did you know? Over three million individuals were impacted by a massive data breach at Arthur J. Gallagher & Co. in 2020. 

The cyberattack exposed personal and financial information, leading to a $21 million class-action settlement. Online threats like these continue to rise, highlighting the need for solid data security measures.

Let's break down what happened, the risks involved, and how to protect your personal information.

What Happened in the Gallagher Data Breach?

Between June 3 and September 26, 2020, a ransomware attack targeted Arthur J. Gallagher & Co., and its subsidiary, Gallagher Bassett Services, Inc. Hackers gained unauthorized access to sensitive personal and financial data, including:

  • Names, Social Security numbers, and tax identification numbers
  • Driver's license, passport, and government-issued ID numbers
  • Financial account and credit card details
  • Medical records, health insurance data, and biometric information

Despite identifying the breach in September 2020, Gallagher waited nearly a year before notifying affected individuals, raising concerns about transparency and data security policies.

Discover if Your Most Critical Identifiers Have Been Exposed on the Dark Web

Receive timely alerts and actionable insights with PurePrivacy's Dark Web Monitoring.

Check if your email is on the dark web.

Please enter a valid email.

What Are the Risks of Exposed Data?

If your information was compromised in the Gallagher data breach, you could be at risk for:

  • Identity Theft: Hackers can use stolen data to create fraudulent accounts, file taxes, or apply for loans under your name.
  • Financial Fraud: Leaked banking and credit card details can lead to unauthorized transactions and monetary losses.
  • Phishing & Scams: Cybercriminals can use your personal information to send convincing scam emails and phone calls.
  • Medical Fraud: Exposed health records can be exploited for fraudulent insurance claims or prescription drug purchases.

What Should You Do If Your Data Was Compromised?

The best defense against data breaches is proactive protection. Here's what you should do if your information were exposed:

  • Monitor Your Accounts: Monitor your financial statements, credit reports, and online accounts for suspicious activity.
  • Enable Financial Monitoring: Gallagher's settlement offers three years of financial account monitoring, so enroll to stay protected.
Gallagher Data Breach data compromised
  • Change Passwords & Enable MFA: Use strong, unique passwords, and enable multi-factor authentication (MFA) on all sensitive accounts.
  • Be Wary of Phishing Attempts: Be cautious of emails or phone calls requesting sensitive information—scammers may use leaked data to appear legitimate.
Gallagher Data Breach change password

Gallagher Settlement: Are You Eligible for Compensation?

As part of the $21 million class-action settlement, affected individuals may be entitled to:

  • Up to $6,000 for documented financial losses related to the breach
  • A share of the settlement fund (pro-rata cash payment)
  • Three years of free financial account monitoring
  • Up to $100 for California residents under the California Consumer Privacy Act (CCPA)

To receive compensation, you must submit a claim by February 10, 2025.

How to Minimize Damage During Data Breaches

If you've been targeted in a data breach, act immediately!

Use PureVPN to enable dark web monitoring to get real-time alerts and ensure that your data is not leaked on the dark web. Reset your passwords, activate multi-factor authentication (MFA), and monitor your accounts for any suspicious activity—because cybercriminals don't wait, and neither should you.

Take control with PureVPN. Get instant notifications when your data is exposed, monitor your privacy status, and enable dark web monitoring to stay proactive against data exploitation.

Use Dark Web Monitoring to Get Alerts About Information Leaks

Your personal information is a target for hackers and scammers, that will ruin your online identity and finances.

Imagine losing your hard-earned money, your reputation, and your peace of mind to a cybercriminal.

With PureVPN, you can scan the Dark Web 24/7 and receive alert notifications whenever someone posts your private information (Email Address, Phone Number, Credit Card Number, SSN, Passport Number). Get instant Dark Web Alerts and the power to stop data breaches dead in their tracks.

Frequently Asked Questions (FAQs)

  • How do I know if my data was affected?

    Plus

    If you have received an email or a call from Gallagher, you are part of the settlement class, and your sensitive data was also exposed in the 2020 breach. You can get in touch with the claims administrator at (833) 739-0738.

  • Can I claim my compensation for the Gallagher breach?

    Plus

    Yes. You can claim your compensation through an email, call an administrator, or use a claim form by February 10, 2025.

  • What if I want to opt out of Gallagher?

    Plus

    You must exclude yourself from the settlement by emailing before January 13, 2025, to retain the right to pursue separate legal action or leave any claims.

Final Thoughts

The Gallagher data breach is another reminder of the growing online threats. While the $21 million settlement offers compensation, it does not undo the damage caused by the exposure of personal data. We must stay alert that companies might undergo a data breach and still not inform us. Don't wait until it's too late—stay informed, protect your data, and take action now.