Alera Group, Inc. reported unauthorized access to its technology environment between July 19, 2024, and August 4, 2024. The company confirmed on April 28, 2025, that personal information, including names and other data elements, may have been removed from its network. The incident affected current and former employees and their dependents. Alera engaged third-party cybersecurity specialists, implemented additional security measures, and is offering 24 months of credit monitoring and identity theft protection services to affected individuals.