Gallagher begins reboot after cyberattack

Arthur J. Gallagher & Co. late Monday revealed additional details on a ransomware incident it first disclosed earlier in the day and said it is in the process of restarting its systems.

On Saturday, the company “detected a ransomware incident impacting a limited portion of our internal systems,” the brokerage disclosed in a filing with the U.S. Securities and Exchange Commission.

On Monday, all systems with subsidiary Gallagher Bassett Services Inc. were shut down. On Tuesday, the unit's website remained offline. 

“We promptly took all of our global systems offline as a precautionary measure, initiated response protocols, launched an investigation, engaged the services of external cybersecurity and forensics professionals, and implemented our business continuity plans to minimize disruption to our customers,” the federal filing reads.

Gallagher added in its filing that the company is “in the early stages of assessing the incident” and that “based on the information currently known, we do not expect the incident to have a material impact on our business, operations or financial condition.”

The brokerage said it has "restarted or are in the process of restarting most of our business systems."

A Gallagher spokeswoman could not immediately be reached for comment.