Personal data of nearly 146,000 customers exposed in the Aon hack

Personal data of nearly 146,000 North American customers of the British multinational financial services firm Aon was exposed in a large data breach between December 29, 2020, to February 26, 2022.

The company, which sells a range of risk-mitigation products, announced in a February Securities & Exchange Commission filing that an unauthorized party had access to the company’s computer network for more than a year.

In a statement, Aon told individuals that affected personally identifiable information includes driver’s license numbers, Social Security numbers, and in many cases, benefits enrolment information.

Aon has taken action to ensure the unauthorized third party is no longer in possession of the data. No evidence has been found; the letter continued that the uninvited third party copied, stored, or shared any additional data. The business stated that they have no grounds for suspicion that your data has been or will be misused. Customers who were impacted were given a 24-month membership to an identity-protection company.

In an emailed statement, spokeswoman Nadine Youssef said that the investigation was complete. The company has concluded the process of notifying those clients and individuals whose personal information was temporarily obtained. According to the investigation, there is no proof that the leaked information has been or will be misused. She emphasized that the business had not fallen victim to ransomware, lost control of its systems, or paid to have them fixed.

Notably, plaintiffs have filed at least two lawsuits against Aon due to the data breach. There have recently been two class-action complaint filings in Chicago.