Alera Group Data Breach Investigation
The data breach lawyers at The Lyon Firm are investigating a recent data breach reported at Alera Group, potentially compromising the persona data of over 10,000 individuals. Alera Group is an independent, national insurance and financial services firm based in in Deerfield, Illinois. The company offers solutions in employee benefits, property and casualty services, retirement planning, and wealth management with offices in 35 states.
Contact our legal team if you receive a data breach notification letter from Alera regarding the recent data security event. We believe any entity that collects and stores your personal information has a duty to properly protect it. We have filed numerous data breach lawsuits on behalf of plaintiffs in multiple states. Call for a free consultation.
What happened at Alera Group?
Alera Group recently announced this data breach, posted a notice of the incident on its website, and started sending data breach notification letters to all impacted individuals on May 21, 2025.
According to the breach notice, Alera Group became aware of unauthorized access to their IT network in August 2024. An investigation concluded that sensitive personal information in its systems belonging to current and former employees, and dependents of employees, may have been removed from the network between July 19 and August 4, 2024. The types of data accessed may include the following:
- Name
- Social Security number
- Address
- Demographic information
- Date of birth
- Birth/marriage certificate
- Driver’s license
- Financial account or credit card information
- Passport
- Other government-issued identification (potentially including state ID, military ID, tribal ID or taxpayer identification number)
- Medical information (potentially including medical history, condition, or diagnosis information, medications, and other treatment or testing information)
- Medical Record Number
- Insurance or claims data (potentially including health insurance information and Medicare/Medicaid ID)
- Electronic/digital signatures
- Biometric information
- Username and password information
The company is providing affected individuals with details of the types of sensitive information impacted and two years of complimentary credit monitoring services. If you receive a breach notification letter from Alera, it is important to understand the increased risks of fraud and identity theft. Contact an attorney to learn more about filing class action claims and to begin to mitigate the risks of a data theft incident.