HackingProfessional ServicesTechnologyProfessional ServicesData ExfiltratedCustomer Data InvolvedPIIPHIIdentity (basic)Health (basic)LowContained

Alliance Solutions Group LLC

bd_41d44db277e8cd35 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 31, 2023

Filed

Mar 1, 2024

To disclose

39 weeks

Affected

20state residents only

Linked

10 records

Confidence

65%

Full breach record for Alliance Solutions Group LLC →

Alliance Solutions Group (d/b/a TalentLaunch) notified Montana residents of a cybersecurity incident detected on May 31, 2023. Unauthorized access exposed personal and protected health information of job applicants. The company engaged forensic investigators, secured its network, and offers 12 months of credit monitoring. No evidence of financial fraud was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 39 weeks / 275 days

May 31, 2023

Discovered

Mar 1, 2024

Filed

vs. sector median

+20 wks slower

This filing is one of 10 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_da6972174a2c59002023-08-17 · +197dVerified by operator

Regulatory filings (8) · sorted by filing gap

Vermont State AGbd_40084b8c1a6b63522024-03-01Verified
Indiana State AGbd_5073a15f60be8df22024-03-01Verified by operator
Oregon State AGbd_61930dd1c928622e2024-03-01Verified by operator
Illinois State AGbd_7dfbf93107cce4012024-03-01Verified by operator

Show 4 more filings ↓

California State AGbd_830f171d79c3783f2024-03-01Verified by operator
Massachusetts State AGbd_8c769e65c3ab0dd82024-03-01Verified
Maine State AGbd_940d219a936b32192024-03-01Verified by operator
Washington State AGbd_ec3f5ec1e7eb627f2024-03-01Verified by operator

Name: TalentLaunch LLC
norm: talentlaunch
Domain: alliancesolutionsgrp.com

Name: Alliance Solutions Group LLC
norm: alliance solutions
Domain: alliancesolutionsgrp.com
Industry: Professional ServicesllmTechnologyllm

Discovered: May 31, 2023
Materiality determined: —
Notification sent: Mar 1, 2024
Affected individuals: 20state-resident count only
Data types: PIIPHIIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Engaged external cybersecurity professionals experienced in handling these types of incidents to conduct an investigation
Took steps to secure our network and mitigate against any additional harm
Conducted a thorough and extensive manual review of the data potentially contained on the impacted servers
Providing complimentary identity theft protection services
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Strengthened our network and implemented additional security improvements recommended by third-party cyber security experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(275 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Vermont State AGMar 1 · first

Indiana State AGMar 1 · first

Oregon State AGMar 1 · first

Illinois State AGMar 1 · first

California State AGMar 1 · first

Massachusetts State AGMar 1 · first

Maine State AGMar 1 · first

Washington State AGMar 1 · first

Montana State AGMar 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1156.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 1, 2024
Raw hash: 5493c06db2a9440cf4733a31944915d16db04945df3ba9edf0daa8750b962579

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityTalentLaunch LLC

Victim entityAlliance Solutions Group LLC

Incidentdiscovered May 31, 2023

Stated responseEngaged external cybersecurity professionals experienced in handling these types of incidents to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov