HackingCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHigh

Alight Solutions LLC

bd_edce9c95e9ce5098 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 15, 2022

Filed

Feb 23, 2023

To disclose

14 weeks

Affected · nationwide

5,5792 in this filing

Linked

4 filings

Confidence

65%

Full breach record for Alight Solutions LLC →6 incidents on file

Alight Solutions, LLC reported an external system breach that occurred between June 1, 2022, and November 15, 2022, and was discovered on November 15, 2022. The incident compromised the names and Social Security numbers of 2 Maine residents. Affected individuals were notified on February 24, 2023, and offered 24 months of complimentary credit monitoring and identity protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 15, 2022 → Filed with AG Feb 23, 2023100d ⏱ ME AG >30d14 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 167 days

discovery → filing · 14 weeks / 100 days

Jun 1, 2022

Begins

Nov 15, 2022

Discovered

Feb 23, 2023

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_91250bb170c4b5982023-02-23Verified
Indiana State AGbd_5db242eaae5cec4d2023-02-24 · +1dVerified
New Hampshire State AGbd_142b08e897461fe22023-02-17 · +6dCandidate

Name: Alight Solutions LLC
norm: alight solutions

Name: Alight Solutions LLC
norm: alight solutions

Discovered: Nov 15, 2022
Breach occurred: Jun 1, 2022 – Nov 15, 2022
Undetected for: 167 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 24, 2023
Affected individuals: 5,579state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 24 Months of credit monitoring and identity protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: ME AG >30d · 100dME resident >60d · 101d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 15, 2022
→ Filed with AG: Feb 23, 2023
100d 30 days (soft) ME AG >30d
Maine
Discovered: Nov 15, 2022
→ Notified: Feb 24, 2023
101d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 15, 2022 → Filed with AG: Feb 23, 2023	100d	30 days (soft)	ME AG >30d
Maine	Discovered: Nov 15, 2022 → Notified: Feb 24, 2023	101d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGFeb 17 · first

Vermont State AG+6d

Maine State AG+6d · this page

Indiana State AG+7d

Pattern: first filing Feb 17 (NH), last Feb 24 (IN) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d23de189-1a41-4d50-9106-463216a3e0a7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2023
Raw hash: 0f79cc864dc32c05b3d63b9b8091c42b04200bba4ec7d43be9d4a8ade63c5e0a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAlight Solutions LLC

Victim entityAlight Solutions LLC

Incidentdiscovered Nov 15, 2022

Stated responseOffered 24 Months of credit monitoring and identity protection services through Experian

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov