HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Alcott HR
bd_23e2e2662dd975b0 · schema v1 · pii pii-v1
Full breach record for Alcott HR →Alcott notified the California Attorney General of a data security incident where an unauthorized user accessed systems containing personal information. The breach was discovered in February 2025. Affected data includes names, Social Security Numbers, and dates of birth. Alcott engaged forensic experts, notified law enforcement, and is offering 24 months of identity theft protection. Remediation steps include enhanced monitoring, firewall strengthening, and MFA policy reinforcement.
California clockDiscovered Feb 12, 2025 → Notified Jun 15, 2026488d ✗ CA 60-day late16 months discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c1a64772c6738112Leak Siteplayfiled 2025-02-25(476d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_05d93b4ec049bf84Indiana State AGfiled 2026-06-17Verified
- bd_c8d2e4907177c37dVermont State AGfiled 2026-06-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-625037
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 17, 2026
- Raw hash
- 7e6a428fc3f23de9a7f28b06c2c44da4574fd1ad2886eb8be88939896ab95cb6
Reporting entity
- Name
- Alcott HRnorm: alcott hr
- Domain
- alcotthr.com
Victim entity
- Name
- Alcott HRnorm: alcott hr
- Domain
- alcotthr.com
Incident
- Discovered
- Feb 12, 2025
- Materiality determined
- —
- Notification sent
- Jun 15, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Threat actor
- External
- Regulator citations
- Reported the circumstances to law enforcement
Compliance
- Time to disclose
- 16 months(490 days from discovery to filing)
- Compliance flags
- CA 60-day late · 488dLeak >180dCA AG copy ≤15d · 2d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 12, 2025→ Notified: Jun 15, 2026488d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Jun 15, 2026→ AG copy submitted: Jun 17, 20262d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.