Alcott HR reports data breach affecting employee social security numbers

Alcott HR, a human resources outsourcing company based in Farmingdale, New York, has disclosed that an unauthorized party gained access to systems containing employee personal information in February 2025, with notification letters only now reaching affected individuals.

The company identified suspicious activity on its network on Feb. 12, 2025, and responded by activating its incident response procedures and hiring outside forensic specialists to examine the intrusion. That investigation found that an unauthorized user had entered certain Alcott systems where personal records were kept.

Names, Social Security numbers and dates of birth were among the data exposed in the breach, according to the company. Alcott said its iSolved human capital management platform, which handles tax documents, benefits enrollment and banking details for employees, was not compromised.

It took until March 2026 for Alcott to finish reviewing the affected records and pinpoint which individuals had information exposed in the incident. The company notified the California Attorney General’s office on June 17, 2026, and began mailing notification letters to affected individuals dated June 15, 2026, more than a year after the breach was first detected.

Alcott has not released a nationwide total of affected individuals, though state filings show 103 Rhode Island residents were among those impacted.

The company is providing 24 months of complimentary identity theft protection through Cyberscout to those affected. Individuals can activate the service through the Cyberscout enrollment portal using a unique code printed in their notification letter, provided they register within 90 days of the letter’s date. Alcott has also opened a call center staffed Monday through Friday from 8 a.m. to 8 p.m. Eastern time at 1-844-507-4934 for people with questions about the breach.

Shamis & Gentile P.A., a law firm that focuses on class action litigation involving data breaches, is examining the Alcott HR incident. Individuals whose information was exposed may be eligible for compensation, though no claims have yet been filed.

Established in 1987, Alcott HR operates as a professional employer organization, supplying payroll, benefits administration, compliance and risk management services to small and mid-sized businesses. The company maintains offices in Long Island and Buffalo and supports client employees across more than 40 states.