HackingData ExfiltratedEmployee Data InvolvedDelayed DiscoveryIDENTITY_BASICPIILowContained
Alera Group, Inc.
bd_4ba58e33f9a13772 · schema v1 · pii pii-v1
Full breach record for Alera Group, Inc. →Alera Group, Inc. notified California residents of unauthorized access to its network between July 19, 2024, and August 4, 2024. The company confirmed on April 28, 2025, that personal information, including names and potentially other data, may have been removed from its network. Affected individuals are current or former employees and dependents. Alera Group engaged third-party cybersecurity specialists, secured its environment, and is offering 24 months of credit monitoring and identity theft protection services through IDX.
California clockDiscovered Aug 1, 2024 → Notified May 21, 2025293d ✗ CA 60-day late42 weeks discovery → filing
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-603045
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2025
- Raw hash
- 79ff5a6e109e4611ebb79fde4ce7844f7b783caf4cc8aea05061dba1f49821b8
Reporting entity
- Name
- Alera Group, Inc.norm: alera group
- Domain
- aleragroup.com
Victim entity
- Name
- Alera Group, Inc.norm: alera group
- Domain
- aleragroup.com
Incident
- Discovered
- Aug 1, 2024
- Materiality determined
- —
- Notification sent
- May 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 42 weeks(293 days from discovery to filing)
- Compliance flags
- CA 60-day late · 293d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 1, 2024→ Notified: May 21, 2025293d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.