Alera Group, Inc.

Alera Group reported a data breach to the Oregon Attorney General. The breach was reported on 2025-12-18. The breach occurred during 7/19/2025 - 8/4/2025. The breach was discovered on 4/28/2025. 18,159 individuals were affected. Notice was sent on 11/7/2025.

Alera Group, Inc., an insurance brokerage firm, reported unauthorized access to its technology environment between July 19, 2024, and August 4, 2024. The company confirmed on April 28, 2025, that personal information, including names and other variable data elements, may have been removed from its network. The incident was first detected in August 2024. Alera Group engaged third-party cybersecurity specialists, implemented additional security measures, and is offering 24 months of credit monitoring to affected individuals. This is a supplemental notice filed with the California Attorney General.

Alera Group, Inc. based in Chicago, Illinois, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-04-28 and reported on 2025-10-24. 105,555 Texas residents were affected. 0 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via Posted at company website or special website;U.S. Mail.

Alera Group, Inc. reported an external system breach (hacking) occurring on July 19, 2024, discovered on April 28, 2025. The incident affected 4 Maine residents. The company provided written notification on September 29, 2025, and offered 24 months of identity theft protection services through IDX.

Alera Group, Inc., an insurance brokerage firm, confirmed on April 28, 2025 that personal information may have been removed from its network as a result of unauthorized access to its technology environment between July 19, 2024 and August 4, 2024. One Maine resident was affected. Individuals were notified on September 5, 2025. Alera Group offered 24 months of IDX credit monitoring at no cost. No specific attack method beyond unauthorized external access was disclosed.

Alera Group, Inc. filed a supplemental notice with the New Hampshire Attorney General on September 5, 2025, regarding a data breach occurring between July 19, 2024, and August 4, 2024. The incident involved unauthorized access resulting in the potential exfiltration of personal information, including names and government identifiers. Alera Group notified approximately one New Hampshire resident and provided 24 months of complimentary credit monitoring through IDX.

Alera Group, Inc., an insurance brokerage firm based in Chicago, IL, experienced unauthorized access to its technology environment between July 19 and August 4, 2024. Personal information was potentially removed from its network. The breach was confirmed on April 28, 2025. Approximately 169 Maine residents were notified on August 28, 2025. Alera Group engaged third-party cybersecurity specialists, secured its environment, and offered 24-month IDX credit monitoring to affected individuals.

Alera Group, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding unauthorized access to its technology environment between July 19, 2024, and August 4, 2024. The incident was discovered in August 2024. Approximately 101 New Hampshire residents were notified. Personal information was potentially exfiltrated. Alera Group engaged third-party cybersecurity specialists, implemented additional security measures, and provided 24 months of complimentary credit monitoring through IDX.

Alera Group, Inc., an insurance brokerage, confirmed on April 28, 2025, that personal information may have been removed from its network due to unauthorized access occurring between July 19, 2024, and August 4, 2024. The company first learned of the activity in August 2024. Affected data includes names and other variable data elements. Alera Group engaged third-party cybersecurity specialists, secured its environment, and is offering 24 months of credit monitoring. This is a supplemental notice.

Alera Group, an insurance brokerage, notified South Carolina residents of unauthorized access to its network occurring July 19–August 4, 2024. Personal information, including names, was potentially removed. Alera engaged third-party cybersecurity specialists, implemented additional security measures, and offers 24 months of credit monitoring. No identity theft was confirmed.

Alera Group, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2025-07-29. The breach occurred from 07/19/2024 to 08/04/2024. 829 Montana residents were affected.

Alera Group, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding unauthorized access to its network occurring between July 19 and August 4, 2024. The incident resulted in the exfiltration of personal information, including names, from approximately 8,343 New Hampshire residents. Alera Group detected the activity in August 2024, engaged third-party cybersecurity specialists, and is offering 24 months of credit monitoring services to affected individuals.

Alera Group, Inc., an insurance brokerage, reported unauthorized access to its network between July 19, 2024, and August 4, 2024. The company confirmed on April 28, 2025, that personal information, including names, may have been removed. First awareness of the activity occurred in August 2024. The firm engaged third-party cybersecurity specialists, implemented additional security measures, and is offering 24 months of credit monitoring to affected individuals. This is a supplemental notice.

Alera Group, Inc., a professional services sector entity reported a data breach to the Iowa Attorney General. The breach was reported on 2025-07-29.

Alera Group, Inc. notified individuals of a data breach involving unauthorized access to its technology environment between July 19, 2024, and August 4, 2024. The incident resulted in the potential removal of personal information, including names and government identifiers. Alera Group engaged third-party cybersecurity specialists, implemented additional security measures, and offered 24 months of credit monitoring and identity theft protection services through IDX to affected individuals.

Alera Group, Inc., an insurance brokerage firm based in Chicago, IL, experienced unauthorized access to its technology environment between July 19 and August 4, 2024. The breach was confirmed on April 28, 2025, when it was determined that personal information may have been removed from the network. Approximately 1,845 Maine residents were notified on July 29, 2025. Affected individuals were offered 24-month credit monitoring and identity theft protection services through IDX.

Alera Group, Inc. reported unauthorized access to its technology environment between July 19, 2024, and August 4, 2024. The company confirmed on April 28, 2025, that personal information, including names and other data elements, may have been removed from its network. The incident affected current and former employees and their dependents. Alera engaged third-party cybersecurity specialists, implemented additional security measures, and is offering 24 months of credit monitoring and identity theft protection services to affected individuals.

Alera Group, Inc. reported a data breach to the Maine Attorney General, affecting 2 Maine residents. The breach, described as an external system hacking incident, occurred on August 4, 2024, and was discovered on April 28, 2025. Affected individuals were notified on June 13, 2025, and offered 24 months of identity theft protection services through IDX.

Alera Group, Inc. notified New Hampshire residents that personal information was removed from its network due to unauthorized access occurring between July 19 and August 4, 2024. The company discovered the incident in August 2024. Approximately 150 NH residents were notified on May 21, 2025. Affected data includes PII such as names and government IDs. Alera Group engaged law enforcement, implemented security measures, and offered credit monitoring.

Alera Group, Inc. notified California residents of unauthorized access to its network between July 19, 2024, and August 4, 2024. The company confirmed on April 28, 2025, that personal information, including names and potentially other data, may have been removed from its network. Affected individuals are current or former employees and dependents. Alera Group engaged third-party cybersecurity specialists, secured its environment, and is offering 24 months of credit monitoring and identity theft protection services through IDX.

Alera Group, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2025-05-21. The breach occurred during 7/19/2024 - 8/4/2024. The breach was discovered on 4/28/2025. 10,874 individuals were affected. Notice was sent on 5/21/2025.

Alera Group Inc., a financial services company, reported a data breach to the Maine Attorney General affecting 8 state residents. The breach, described as an external system hacking incident, occurred on August 4, 2024, and was discovered on April 28, 2025. The company began notifying affected individuals on May 21, 2025, and offered 24 months of identity theft protection services through IDX.

Alera Group Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-07-19 and was reported on 2025-05-21. 4,810 Indiana residents were affected. 10,874 individuals affected in total.

Alera Group, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2025-05-21. The breach occurred from 07/19/2025 to 08/04/2024. 22 Montana residents were affected.

Alera Group, Inc., a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2024-08-04 and filed notice on 2025-05-21. 27,901 Washington residents were affected. 290 days elapsed between awareness and notification. 16 days to identify the breach. 0 days to contain the breach.