Alcott HR
bd_01d619ed5ce88bff · schema v1 · pii pii-v1
Full breach record for Alcott HR →Alcott HR, a certified professional employer organization, notified the New Hampshire Attorney General of a data security incident. In February 2025, Alcott detected unauthorized activity on its network. An investigation concluded in March 2026 that an unauthorized user accessed systems containing personal information, including names, Social Security Numbers, and dates of birth, of 128 New Hampshire residents. Alcott engaged forensic experts, notified law enforcement, and implemented security enhancements including MFA and firewall strengthening. Identity theft protection services were offered to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 1, 2025
Discovered
Jun 22, 2026
Filed
vs. sector median
+55 wks slower
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteplaybd_c1a64772c67381122025-02-25 · +481dVerified
Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_69ca5b1c0c2565be2026-06-23 · +1dVerified
- Indiana State AGbd_05d93b4ec049bf842026-06-17 · +5dVerified
- California State AGbd_23e2e2662dd975b02026-06-17 · +5dCandidate
- Nebraska State AGbd_b5af6a27d6702fe22026-06-17 · +5dVerified
Show 1 more filing ↓Show fewer ↑up to 5d gap
- Vermont State AGbd_c8d2e4907177c37d2026-06-17 · +5dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jun 17 (IN), last Jun 23 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.