Outsourcing and offshoring services firm, Alta Resources Corp, recently experienced a significant data breach that exposed sensitive personal information of 37,363 individuals across the United States. The breach occurred on November 18, 2023, when unauthorized access to certain company servers was detected. Alta discovered encrypted files on its systems, prompting an immediate investigation with the help of third-party forensic specialists. The investigation revealed that the breach involved unauthorized access to the servers between November 17 and November 18, 2023.
The stolen data included highly sensitive personal information, such as:
- Social Security Numbers
- Medical Records
- Financial Account Information
- Driver’s Licenses
- Names
- Addresses
- Government-issued ID numbers (e.g., passports, state ID cards)
- Financial Information
The breach was disclosed to the California Attorney General on December 20, 2024, the Massachusetts Attorney General on December 20, 2024, the Maine Attorney General on December 24, 2024, and the Texas Attorney General on December 23, 2024.
The breach affected individuals nationwide, with specific numbers reported in several states:
- 787 individuals in Texas
- 68 individuals in Massachusetts
- 19 individuals in Maine
Alta notified consumers of the breach on December 20, 2024, via U.S. Mail.
Alta Resources Corp.'s response
Upon discovering the breach, Alta Resources Corp. acted swiftly to secure its systems and launched a comprehensive investigation with the assistance of cybersecurity experts. The company reported the incident to federal law enforcement and conducted a thorough review of the compromised data to identify affected individuals.
To mitigate the impact of the breach, Alta has taken the following steps:
- Implemented additional safeguards and security measures to prevent future incidents.
- Notified relevant state and federal regulators, including the U.S. Department of Health and Human Services, as required under the Health Insurance Portability and Accountability Act (HIPAA).
- Offered 12 months of complimentary credit monitoring services through TransUnion to affected individuals.
- Provided guidance to consumers on how to protect against identity theft and fraud, including instructions on placing fraud alerts and credit freezes, obtaining free credit reports, and reporting identity theft to the Federal Trade Commission (FTC) and law enforcement.
Steps to take if you are affected by the data breach
If you have received a notification from Alta Resources Corp. or believe you may be affected by this breach, it is crucial to take immediate action to protect your personal and financial information.
Follow these steps:
- Enroll in credit monitoring services: Alta is offering 12 months of free credit monitoring through TransUnion. Use the unique code provided in your notification letter to enroll within 90 days.
- Monitor your financial accounts: Regularly review your bank, credit card, and other financial account statements for unauthorized transactions or suspicious activity.
- Check your credit reports: Obtain free credit reports from AnnualCreditReport.com and monitor them for inaccuracies or unfamiliar accounts.
- Place a fraud alert or credit freeze: Contact one of the three major credit reporting agencies—Equifax, Experian, or TransUnion—to place a fraud alert or credit freeze on your credit file. A fraud alert lasts one year and requires businesses to verify your identity before issuing credit. A credit freeze prevents new accounts from being opened in your name without your authorization.
- Stay vigilant: Be cautious of phishing attempts or unsolicited communications requesting sensitive information. Scammers may use information from the breach to target affected individuals.
- Report identity theft: If you suspect your information has been misused, file a report with the FTC at IdentityTheft.gov and notify your local law enforcement agency.
- Contact your state Attorney General: If you need additional assistance, reach out to your state Attorney General’s office for guidance and support.