About Alera Group, Inc.
Alera Group, Inc. is a financial services organization based in Chicago, Illinois. On July 19, 2024, the company experienced a data breach involving their external systems. This breach was discovered on April 28, 2025, and affected multiple individuals, including four residents of Maine. As part of their response, Alera Group has taken steps to notify those impacted and provide necessary support.
What Happened
On or about September 29, 2025, Alera Group continued to provide written notice of this event to approximately four (4) Maine residents. Alera Group is notifying individuals directly and on behalf of certain data owner clients. Written notice is being provided in substantially the same form as the letter attached here as Exhibit A. Alera Group posted notice of this event on its website and also notified relevant media outlets. Notification is being provided to certain individuals pursuant to the Health Insurance Portability and Accountability Act.
The breach involved hacking into external systems, potentially compromising personal identifiers. It primarily affected clients and individuals associated with Alera Group. The breach occurred on July 19, 2024, but was not discovered until April 28, 2025.
Next Steps
Affected users are advised to remain vigilant for any signs of identity theft or fraud. Alera Group has already notified individuals directly impacted by the breach and has also posted a notice on its website. It is important for users to review their financial statements and report any suspicious activities to their financial institutions. Those affected should also follow the instructions provided in the written notice they received from Alera Group.
Identity Theft Protection Services
Alera Group is offering identity theft protection services to individuals impacted by the data breach. These services are provided through IDX, and affected individuals will have access to two years of credit monitoring at no cost. The protection services are designed to help detect potential misuse of personal information and provide support in restoring identity integrity if needed. Affected individuals are encouraged to enroll in these services to safeguard their information.