HackingProfessional ServicesProfessional ServicesStolen CredentialsEmail MisuseTargetedData ExfiltratedIdentity (basic)Government IDMediumContained

Alight Solutions LLC

bd_142b08e897461fe2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 15, 2022

Filed

Feb 17, 2023

To disclose

13 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Alight Solutions LLC →4 incidents on file

Alight Solutions, LLC notified the New Hampshire Attorney General of a data security event affecting one NH resident. Unauthorized access to the corporate email environment occurred between June 1, 2022, and November 15, 2022. The actor established rules to transfer in-transit messages to a third-party mailbox. Affected data included names, employee IDs, and SSNs. Alight contained the incident, engaged forensic providers and the Secret Service, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 167 days

discovery → filing · 13 weeks / 94 days

Jun 1, 2022

Begins

Nov 15, 2022

Discovered

Feb 17, 2023

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Alight Solutions LLC
norm: alight solutions

Name: Alight Solutions LLC
norm: alight solutions
Industry: Professional Servicesllm

Discovered: Nov 15, 2022
Breach occurred: Jun 1, 2022 – Nov 15, 2022
Undetected for: 167 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 14, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Engaged with the Secret Service to investigate the incident
Initial access: valid_credentials

During the incident: Began investigating this incident with the assistance of multiple forensic providers
Actively engaged with the Secret Service to investigate the incident
Promptly contained the incident and blocked the unauthorized party from accessing the Alight email environment
Worked with third party forensic providers to confirm that the unauthorized third party no longer had access to Alight’s email environment
Changes made: Forced password resets
Changes to Alight’s firewall configuration
Additional detection safeguards to its corporate email environment
Offering complimentary credit monitoring and identity protection services through Experian to affected individuals for 24 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(94 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/alight-solutions-20230217.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2023
Raw hash: 6e1665576525f7fca6669027b8c0f70e74ffdbeb55e58fae5713c7d32b2f6e95

Reporting entityAlight Solutions LLC

Victim entityAlight Solutions LLC

Incidentdiscovered Nov 15, 2022

Stated responseBegan investigating this incident with the assistance of multiple forensic providers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov