Strauss Borrelli PLLC, a leading data breach law firm, is investigating Gregory & Appel, Inc. regarding its recent data breach. The Gregory & Appel data breach may have involved sensitive personal information belonging to an undetermined number of individuals.
ABOUT GREGORY & APPEL, INC.:
Gregory & Appel is an independent risk management advisor based in Indiana. Founded in 1884, Gregory & Appel offers a variety of risk management services and solutions to businesses such as risk management strategy, insurance market selection, claim advocacy, captives and risk retention groups, and surety.2 Additionally, Gregory & Appel offers products for employees, including benefits plan design, population health and data analytics, legal and compliance, HR services and technology, and voluntary benefits.3 Headquartered in Indianapolis, Indiana, Gregory & Appel employ over 50 individuals.
WHAT HAPPENED?
Recently, Gregory & Appel reported to the Attorney General of the Commonwealth of Massachusetts that the sensitive personal identifiable information in its care may have been accessed and acquired. According to the breach notice, on or around February 5, 2025, Gregory & Appel became aware of a suspicious email from someone purporting to be its CFO which was sent to a Gregory & Appel employee.1 As a result, Gregory & Appel launched an investigation to determine the nature of the incident.
Through its investigation, Gregory & Appel determined that an employee inadvertently emailed Gregory & Appel employee W-2s to an unauthorized individual.1 As a result, Gregory & Appel began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On January 6, 2025, Gregory & Appel completed this review. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
As a result of the data breach, Gregory & Appel began mailing data breach notification letters to impacted individuals. Based on the breach notices provided to the Massachusetts residents, Gregory & Appel is providing affected individuals with a list of the information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letter that Gregory & Appel filed with the Attorney General of the Commonwealth of Massachusetts is below.
If you received a breach notification letter from Gregory & Appel, Inc.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
