HackingConstructionConstructionData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumResolved

Alliance Roofing Company, Inc.

bd_495cce9b199f984f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 7, 2026

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

78%

Full breach record for Alliance Roofing Company, Inc. →2 incidents on file

Alliance Roofing Company, Inc. experienced a network disruption on October 6, 2025. An unknown external actor gained unauthorized access to the network and potentially acquired personal data including names, Social Security Numbers, and Driver License Numbers. A data review concluded February 23, 2026, and notification letters were sent April 24, 2026. Affected individuals were offered 12 months of credit monitoring via Cyberscout.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Oct 6, 2025

Begins

May 7, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 215 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_9d2b2726ebfe6f4b2025-10-04 · +215dVerified by operator

Name: Alliance Roofing Company, Inc.
norm: alliance roofing
Domain: allianceroofingcal.com

Name: Alliance Roofing Company, Inc.
norm: alliance roofing
Domain: allianceroofingcal.com
Industry: construction
Industry: Constructionllm

Discovered: —
Breach occurred: Oct 6, 2025
Materiality determined: —
Notification sent: Apr 24, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1074 Data Staged
Threat actor: External
Regulator citations: Notified California Attorney GeneralNotified Iowa Attorney GeneralNotified Kentucky Attorney GeneralNotified Maryland Attorney GeneralNotified Oregon Attorney GeneralNotified New York Attorney GeneralNotified North Carolina Attorney GeneralNotified Rhode Island Attorney GeneralNotified Washington D.C. Attorney General

During the incident: Took steps to secure our network
Engaged cybersecurity experts to conduct an investigation
Conducted a thorough review of the impacted data, which concluded on February 23, 2026
Offering access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge through Cyberscout
Providing proactive fraud assistance through Cyberscout, a TransUnion company
Changes made: Implemented measures to enhance our network security and minimize the risk of a similar occurrence in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180dCA AG copy ≤15d · 13d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Consumers notified: Apr 24, 2026
→ AG copy submitted: May 7, 2026
13d 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Consumers notified: Apr 24, 2026 → AG copy submitted: May 7, 2026	13d	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-622966
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2026
Raw hash: d42d38d91198b8406bc786eebcd47c51524e741a9ced8cbb6245681201710615

Linked disclosures

Ransomware claims (1)

Reporting entityAlliance Roofing Company, Inc.

Victim entityAlliance Roofing Company, Inc.

IncidentUnauthorized Access

Stated responseTook steps to secure our network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov