Where does the Alera Group case file come from?

Every entry is taken from the breach report Alera Group lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Alera Group Data Breach

This file collects the dated facts on record for the Alera Group incident. The state report is dated December 18, 2025. The incident itself is dated July 19, 2025.

Timeline

152 days separate the incident date from the date it was reported.

July 19, 2025Incident dateWhen the filing says the breach took place.
December 18, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: December 18, 2025
Incident date: July 19, 2025
Receiving office: Oregon Attorney General

Case notes

Alera Group, headquartered in Oregon, has officially reported a data security incident that took place on July 19, 2025. The company submitted its official notice regarding this event on December 18, 2025, indicating that an unspecified type of breach occurred.

The specific categories of personal information involved in this incident have not been detailed in the public filing. As a result, it is important for individuals who may be affected to carefully review any direct notifications they receive from Alera Group for specific details relevant to their situation.

Currently, Alera Group states that it is actively investigating the incident. This ongoing investigation aims to determine the full scope of the breach and the extent to which personal information may have been accessed or acquired without authorization.

While the exact nature of the exposed data remains unspecified, those concerned about their information should take general precautions. These include monitoring financial and credit accounts for any unusual activity and exercising caution with unsolicited communications, such as suspicious emails or phone calls, that might attempt to gather additional personal details.

These details are based on information provided in public regulatory filings, serving as a record of the reported security event.

Questions about this case file

Where does the Alera Group case file come from?: Every entry is taken from the breach report Alera Group lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the Alera Group breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files