HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Alera Group, Inc.
bd_ed57df1e6d5282bc · schema v1 · pii pii-v1
Full breach record for Alera Group, Inc. →Alera Group, Inc., an insurance brokerage, confirmed on April 28, 2025, that personal information may have been removed from its network due to unauthorized access occurring between July 19, 2024, and August 4, 2024. The company first learned of the activity in August 2024. Affected data includes names and other variable data elements. Alera Group engaged third-party cybersecurity specialists, secured its environment, and is offering 24 months of credit monitoring. This is a supplemental notice.
California clockDiscovered Aug 1, 2024 → Notified Aug 28, 2025392d ✗ CA 60-day late13 months discovery → filing
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-607871
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 28, 2025
- Raw hash
- 63b606396951dd9d69b3fbdc949103a3591f4f7e09c2ae7b6279facd53a0f39f
Reporting entity
- Name
- Alera Group, Inc.norm: alera group
- Domain
- aleragroup.com
Victim entity
- Name
- Alera Group, Inc.norm: alera group
- Domain
- aleragroup.com
Incident
- Discovered
- Aug 1, 2024
- Materiality determined
- —
- Notification sent
- Aug 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 13 months(392 days from discovery to filing)
- Compliance flags
- CA 60-day late · 392d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 1, 2024→ Notified: Aug 28, 2025392d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.