HackingIdentity (basic)Government IDMediumContained

Alcott HR

bd_b5af6a27d6702fe2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 1, 2025

Filed

Jun 17, 2026

To disclose

—

Affected

54state residents only

Linked

7 filings

Confidence

67%

Full breach record for Alcott HR →

Alcott HR, a certified professional employer organization, notified the Nebraska Attorney General of a data security incident discovered in February 2025. An unauthorized user gained access to systems containing PII (SSN, DOB) of 54 Nebraska residents. Alcott engaged forensic experts, reported to law enforcement, and sent notification letters on June 17, 2026, offering 24 months of identity theft protection.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Feb 1, 2025

Discovered

Jun 17, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 476 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_c1a64772c67381122025-02-25 · +476dVerified

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_05d93b4ec049bf842026-06-17Verified
California State AGbd_23e2e2662dd975b02026-06-17Candidate
Vermont State AGbd_c8d2e4907177c37d2026-06-17Verified
New Hampshire State AGbd_01d619ed5ce88bff2026-06-22 · +5dVerified

Show 1 more filing ↓up to 6d gap

Massachusetts State AGbd_69ca5b1c0c2565be2026-06-23 · +6dVerified

Name: Alcott HR
norm: alcott hr
Domain: alcotthr.com

Name: Alcott HR
norm: alcott hr
Domain: alcotthr.com

Discovered: Feb 1, 2025
Materiality determined: —
Notification sent: Jun 17, 2026
Affected individuals: 54state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Nebraska Attorney General
Initial access: valid_credentials

During the incident: Implemented additional security measures to help secure its systems and prevent future unauthorized access
Engaged a third-party forensic firm to assist
Reported the circumstances to law enforcement
Engaged independent computer forensic experts to assist with conducting a thorough investigation
Changes made: Improving our vendor support and security
Enhancing threat detecting and endpoint monitoring tools utilized in our IT environment
Strengthening firewalls
Conducting third-party review of our configuration details
Reemphasized password and multifactor authentication policies
Working with our IT and security experts to further enhance our security posture
Took steps to prevent any personal information from being released publicly
Offering 24-months of identity theft protection services through TransUnion
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJun 17 · first

California State AGJun 17 · first

Vermont State AGJun 17 · first

Nebraska State AGJun 17 · first · this page

New Hampshire State AG+5d

Massachusetts State AG+6d

Pattern: first filing Jun 17 (IN), last Jun 23 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/3b075f86-db36-450b-b372-16b780b4b714.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2026
Raw hash: 5eb9050c713a11d959ffb2c741697fe8403777836137ee2af181c054c10ffa3d

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityAlcott HR

Victim entityAlcott HR

Incidentdiscovered Feb 1, 2025

Stated responseImplemented additional security measures to help secure its systems and prevent future unauthorized access

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov