2025 Alcott HR — unauthorized system access (Feb); CA AG notice Jun 2026 (SSNs, DOB, DL, health)
Data compromised
Per Alcott substitute notice and California AG filing: names, dates of birth, Social Security numbers, driver’s license information, health information, and/or other information provided in connection with Alcott services. Company stated iSolved HCM (tax/benefits/banking) was not impacted. Nationwide count not published in open notice reviewed.
Technical writeup
Verified company / California AG disclosure — reported June 17, 2026 (breach dates filed as February 12, 2025). Alcott HR, a professional employer organization / HR outsourcing firm, said it noticed unusual activity on some systems in February 2025, notified law enforcement, and engaged forensic experts. Investigation found unauthorized access to systems storing personal information; Alcott completed its review of impacted individuals in March 2026 and began notices (letters dated around June 15, 2026 per attorney summaries). Categories may include names, dates of birth, Social Security numbers, driver’s license information, health information, and related service data. Alcott stated its iSolved human capital management platform (tax forms, benefits, banking) was not impacted, reported security enhancements, and offered 24 months of Cyberscout identity protection (enrollment deadline September 15, 2026). BreachHistory retains recordsAffected 0 pending an attested nationwide count.
Root cause
Unauthorized user gained access to certain Alcott systems where personal information was stored after unusual activity noticed February 2025; review of impacted individuals completed March 2026 (company/CA AG notice)