HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Alight Solutions Savings Plan
bd_91250bb170c4b598 · schema v1 · pii pii-v1
Full breach record for Alight Solutions Savings Plan →Alight Solutions, LLC reported a November 2022 security incident where an unauthorized individual accessed its corporate email environment. The attacker forwarded emails containing names, Social Security numbers, and benefit status to an external mailbox. Alight blocked access, engaged forensic investigators and federal law enforcement, and offered 24 months of Experian IdentityWorks monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_edce9c95e9ce5098Maine State AGfiled 2023-02-23Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-23-alight-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2023
- Raw hash
- 9ab60eaa13613cec234143229a1827d00efb6796eaa3e08ac3be5f445c2a8759
Reporting entity
- Name
- Alight Solutions Savings Plannorm: alight solutions savings plan
Victim entity
- Name
- Alight Solutions Savings Plannorm: alight solutions savings plan
Incident
- Discovered
- Nov 1, 2022
- Materiality determined
- —
- Notification sent
- Feb 23, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Engaged with federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(114 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.