HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Alcott HR
bd_01d619ed5ce88bff · schema v1 · pii pii-v1
Full breach record for Alcott HR →Alcott HR, a professional employer organization, notified the New Hampshire Attorney General of a data security incident in February 2025. An unauthorized user gained access to systems containing PII, including names, Social Security Numbers, and dates of birth, affecting 128 New Hampshire residents. Alcott engaged forensic experts, reported to law enforcement, and offered 24 months of identity theft protection. The incident status is contained.
Leak gap clock✗ Leak >180d17 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed128 affectedView incident
A leak claim by play about this victim predates this filing by 481 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/alcott-hr-20260622.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 22, 2026
- Raw hash
- 0f7b90faf5d15dde6ef787ef8ea3ecefa86c70d89f940183a5d1a2268cdcc7c5
Reporting entity
- Name
- CLARK HILL PLCnorm: clark hill
Victim entity
- Name
- Alcott HRnorm: alcott hr
- Domain
- alcotthr.com
Incident
- Discovered
- Feb 1, 2025
- Materiality determined
- —
- Notification sent
- Jun 17, 2026
- Affected individuals
- 128
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 months(506 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.