On July 10, 2023, Accelya Global, Ltd. (“Accelya”) filed a notice of data breach with the Attorney General of Massachusetts after discovering that Alight Solutions (“Alight”), one of Accelya’s vendors, experienced a data security incident related to the company’s use of the file transfer software MOVEit. In this notice, Accelya explains that the incident resulted in an unauthorized party potentially accessing consumers’ sensitive information, which includes their names, contact information, dates of birth, Social Security numbers, other demographic information, and certain job and salary information. Upon completing its investigation, Alight began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you receive a letter from Accelya discussing the MOVEit / Alight data breach, it is essential you understand what is at risk and what you can do about it. While this incident did not impact the IT systems of Accelya or Alight, it may have resulted in confidential information stored on Alight’s MOVEit server being compromised. As a result, anyone in receipt of a data breach letter from Accelya is at a significantly heightened risk of identity theft. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the MOVEit / Alight data breach. For more information, please see our recent piece on the topic here.

What Caused the Alight / MOVEit Breach?

The Alight data breach was only recently announced, and more information is expected in the near future. However, Accelya’s filing with the Attorney General of Massachusetts provides some important information on what led up to the breach. According to this source, Accelya outsources some HR-related software services to Alight, which requires Accelya to provide Alight with confidential information in Accelya’s possession.

Alight uses a popular file transfer application called MOVEit. On May 31, 2023, the creator of MOVEit announced a critical vulnerability in the software. This vulnerability allowed unauthorized actors to access files transferred through MOVEit.

Once Alight learned of the MOVEit vulnerability, it launched an investigation to determine if any information was removed from the company’s MOVEit server. Accelya also conducted an investigation to determine the same. While neither company could confirm that Accelya data was compromised, it could not be ruled out, either.

After learning that sensitive consumer data may have been accessible to an unauthorized party, Accelya reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, contact information, date of birth, Social Security number, other demographic information, and certain job and salary information.

On July 10, 2023, Accelya sent out data breach letters to anyone who was affected by the recent data security incident.

More Information About Alight Solutions and Accelya

Founded in 2017, Alight Solutions is a human resources software company based in Lincolnshire, Illinois. The company provides health, wealth and human capital management and financial solutions to its corporate clients. Alight employs more than 16,000 people and generates approximately $1.6 billion in annual revenue.

Founded in 1976, Accelya is a business intelligence software company based in Mumbai, India. The company provides financial and business intelligence solutions to the Airline and Travel industry. Accelya helps airline and travel companies manage their financial processes and gain insights into their businesses. Accelya employs approximately 2,500 people and generates $45 million in annual revenue.