HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Alera Group, Inc.
bd_1aa6af47857bf206 · schema v1 · pii pii-v1
Full breach record for Alera Group, Inc. →Alera Group, Inc. notified New Hampshire residents that personal information was removed from its network due to unauthorized access occurring between July 19 and August 4, 2024. The company discovered the incident in August 2024. Approximately 150 NH residents were notified on May 21, 2025. Affected data includes PII such as names and government IDs. Alera Group engaged law enforcement, implemented security measures, and offered credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_961aa1da516b7c32Indiana State AGfiled 2025-05-21Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/alera-group-20250521.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2025
- Raw hash
- b6a3e89f5ae11a737a767b638ec80585288544133ca74e61cec00ba442ab9a75
Reporting entity
- Name
- Alera Group, Inc.norm: alera group
- Domain
- aleragroup.com
Victim entity
- Name
- Alera Group, Inc.norm: alera group
- Domain
- aleragroup.com
Incident
- Discovered
- Aug 1, 2024
- Materiality determined
- Apr 28, 2025
- Notification sent
- May 21, 2025
- Affected individuals
- 150
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement regarding the eventProviding written notice of this incident to relevant state regulators
Compliance
- Time to disclose
- 42 weeks(293 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.