Alliance Solutions Group

The Vermont Office of the Attorney General disclosed on March 1, 2024, that Alliance Solutions Group (operating as TalentLaunch) suffered a cybersecurity breach on or around May 31, 2023. Unauthorized actors gained access to the company’s network, potentially exposing personal and protected health information (PHI) of an undetermined number of individuals. Specifically, 245 Rhode Island residents were confirmed as impacted. The compromised data may include identifiable personal details, though the exact scope of the breach such as whether the attack involved ransomware, phishing, or other vectors was not detailed. The incident highlights risks to employee and customer data, with potential financial, reputational, and regulatory repercussions for the organization. The company has not publicly clarified whether the breach was contained swiftly or if the exposed data was exfiltrated or misused by threat actors.

Source: https://ago.vermont.gov/document/2024-03-01-alliance-solutions-group-dba-talentlaunch-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/alliance-solutions-group-inc.

"id": "all1058090725",
"linkid": "alliance-solutions-group-inc.",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown total; 245 Rhode Island '
                                              'residents confirmed',
                        'industry': 'Human Resources / Staffing',
                        'name': 'Alliance Solutions Group (TalentLaunch)',
                        'type': 'Business (Staffing/Recruitment)'}],
 'data_breach': {'number_of_records_exposed': 'Unknown total; 245 (Rhode '
                                              'Island residents)',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (PII/PHI)',
                 'type_of_data_compromised': ['Personal Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2023-05-31',
 'date_publicly_disclosed': '2024-03-01',
 'description': 'The Vermont Office of the Attorney General reported that '
                'Alliance Solutions Group, doing business as TalentLaunch, '
                'experienced a cybersecurity incident involving unauthorized '
                'access to their network on or about May 31, 2023. The '
                'incident potentially exposed personal information, including '
                'identifiable personal and/or protected health information, of '
                'an unknown number of individuals, with specifically 245 Rhode '
                'Island residents impacted.',
 'impact': {'data_compromised': ['Identifiable Personal Information',
                                 'Protected Health Information'],
            'identity_theft_risk': 'Potential (due to exposed PII/PHI)'},
 'references': [{'date_accessed': '2024-03-01',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General (and '
                                                       'potentially others, '
                                                       'e.g., HIPAA if PHI was '
                                                       'exposed)'},
 'response': {'communication_strategy': 'Public disclosure via Vermont '
                                        'Attorney General (March 1, 2024)'},
 'title': 'Alliance Solutions Group (TalentLaunch) Cybersecurity Incident',
 'type': 'Unauthorized Network Access / Data Breach'}