Marsh & McLennan Cos. Inc. was hit by a data breach in April involving access to Social Security numbers and other personal information of staff, former staff, clients and a range of other people linked to the brokerage.
Marsh McLennan notified that the breach involved a limited set of data and it reset system access rights and imposed additional restrictions.
The information involved included names, Social Security numbers or other federal tax identification numbers.
The company offered complimentary credit monitoring for two years, identity theft detection and resolution services and up to $1 million in identity theft insurance coverage.
TPRM report: https://scoringcyber.rankiteo.com/company/marshmclennan
"id": "mar18242223",
"linkid": "marshmclennan",
"type": "Data Leak",
"date": "04/2021",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Brokerage',
'name': 'Marsh & McLennan Cos. Inc.',
'type': 'Company'}],
'customer_advisories': ['Complimentary credit monitoring for two years',
'Identity theft detection and resolution services',
'Up to $1 million in identity theft insurance '
'coverage'],
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'Federal tax identification '
'numbers',
'Names']},
'date_detected': 'April 2023',
'description': 'Marsh & McLennan Cos. Inc. was hit by a data breach in April '
'involving access to Social Security numbers and other '
'personal information of staff, former staff, clients, and a '
'range of other people linked to the brokerage.',
'impact': {'data_compromised': ['Social Security numbers',
'Federal tax identification numbers',
'Names'],
'identity_theft_risk': True},
'references': [{'source': 'Marsh & McLennan Cos. Inc.'}],
'response': {'containment_measures': ['Reset system access rights',
'Imposed additional restrictions']},
'title': 'Marsh & McLennan Data Breach',
'type': 'Data Breach'}