Alight Solutions LLC

Alight Solutions notified individuals of a privacy incident on September 23, 2025, involving the inadvertent disclosure of personal information (name, SSN, address, benefit plan enrollment) to an unauthorized client contact due to human error. The recipient confirmed deletion of the data. Alight reviewed procedures, implemented additional safeguards, provided training, and offered 12 months of credit monitoring.

Alight Solutions LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-06-01 and was reported on 2023-02-24. 23 Indiana residents were affected. 5,579 individuals affected in total.

Alight Solutions, LLC experienced unauthorized access to its corporate email environment in November 2022. An unauthorized individual accessed the system, resulting in certain emails containing personal information (first name, last name, social security number, and benefit status) being forwarded to an external corporate mailbox. Alight blocked the unauthorized access, engaged forensic investigators and federal law enforcement, and implemented forced password changes and additional detection safeguards. Affected individuals were offered 24 months of Experian IdentityWorks.

Alight Solutions, LLC reported an external system breach that occurred between June 1, 2022, and November 15, 2022, and was discovered on November 15, 2022. The incident compromised the names and Social Security numbers of 2 Maine residents. Affected individuals were notified on February 24, 2023, and offered 24 months of complimentary credit monitoring and identity protection services through Experian.

Alight Solutions, LLC notified the New Hampshire Attorney General of a data security event affecting one NH resident. Unauthorized access to the corporate email environment occurred between June 1, 2022, and November 15, 2022. The actor established rules to transfer in-transit messages to a third-party mailbox. Affected data included names, employee IDs, and SSNs. Alight contained the incident, engaged forensic providers and the Secret Service, and offered 24 months of credit monitoring.

Alight Solutions, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-02-23. 5 Massachusetts residents were affected. The report records the breach type as electronic.

Alight Solutions reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-09-30. 1 Massachusetts residents were affected. The report records the breach type as paper.

Alight Solutions LLC notified the NH AG of an inadvertent disclosure of PII (SSN, DOB) for 46 NH residents. Issues: 1) SSNs in email properties (Sept 2014-June 2019). 2) SSN/DOB in URLs to third parties (Oct 2016-Feb 2019). Discovered May 20, 2019. Remediated by encrypting emails and removing PII from URLs. Notifications sent Aug 26, 2019 with 2 years identity theft protection.

Alight Solutions LLC administers the Federal Reserve Benefits Center. In May 2019, a routine security review revealed that from Sept 2014 to June 2019, system-generated emails inadvertently included recipients' SSNs in email properties. Additionally, from Oct 2016 to Feb 2019, URLs linking to third-party providers contained SSNs and DOBs. Alight encrypted the data and offered 2 years of identity theft protection.

Alight Solutions LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-08-20. 847 Massachusetts residents were affected. The report records the breach type as electronic.

Alight Solutions LLC disclosed that system-generated emails from the SmartBenefits website inadvertently included Social Security Numbers in email properties from September 22, 2014, through June 29, 2019. Additionally, URLs linking to third-party sites included SSNs and dates of birth from October 1, 2016, to February 22, 2019. The issue was discovered on May 20, 2019, during a routine security review. Alight encrypted SSNs in email properties and removed PII from URLs. Identity theft protection was offered to affected individuals.

Alight Solutions Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-11-09. 9 Massachusetts residents were affected. The report records the breach type as paper.