Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Alera Group

Disclosed May 21, 2025174,378 affectedConfirmed

Official notice

What is known

People affected174,378 (as reported to HHS)
DisclosedMay 21, 2025
DiscoveredAug 4, 2024
HappenedAug 4, 2024
AttackRansomware
Data exposedNamesGovernment IDsHealthInsuranceCredentials and tokens
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Alera Group
Official noticeatg.wa.gov
Washington Attorney General breach notice: Alera Group
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: Alera Group
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Alera Group
Official noticein.gov
Indiana Attorney General 2025 data breach report: Alera Group
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Alera Group (Business Associate, IL)

Notices filed

Residents of CAMay 21, 2025
California AGCount not stated
Residents of WAMay 21, 2025
Washington AG27,901 people
Residents of ORMay 21, 2025
Oregon DOJ10,874 people
Residents of INMay 21, 2025
Indiana AG4,810 people
Residents of CAJun 13, 2025
California AGCount not stated
Residents of CAJul 29, 2025
California AGCount not stated
Residents of DEJul 29, 2025
Delaware DOJ3,215 people
TotalJul 29, 2025
HHS archive174,378 people
Residents of DEJul 29, 2025
Delaware DOJ3,215 people
Residents of CAAug 28, 2025
California AGCount not stated
Residents of CANov 7, 2025
California AGCount not stated
Residents of ORDec 18, 2025
Oregon DOJ18,159 people
History of this record
sector2026-09-25
other to healthby backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
10874 to 174378by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 10874by backfillSource
data_types2026-09-25
[] to ["names","government-id","health","insurance","credentials"]by backfillSource
attack2026-09-25
unknown to ransomwareby backfillSource
discovered2026-09-25
empty to 2024-08-04by backfillSource
disclosed2026-09-25
2025-06-13 to 2025-05-21by backfillSource
disclosed2026-09-25
2025-07-29 to 2025-06-13by backfillSource
occurred2026-09-25
empty to 2024-08-04by backfillSource
disclosed2026-09-25
2025-08-28 to 2025-07-29by backfillSource
disclosed2026-09-25
2025-11-07 to 2025-08-28by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Alera Group