Alation, Inc., an enterprise data intelligence and software company, reported a data breach to state regulators after detecting unauthorized access to its internal systems. The unauthorized activity reportedly began on August 10, 2026, and was discovered by the company on August 18, 2026. Alation notified corporate clients, including financial services firm Janney Montgomery Scott, in September 2026, followed by filings submitted to state regulators in November 2026.
According to regulatory filings, compromised data elements included Social Security numbers, government identification numbers, names, addresses, and financial account information. While Alation filed a disclosure with the Vermont Attorney General reporting two affected residents, a comprehensive nationwide total of impacted individuals across all downstream clients has not been publicly released.
Investigations into vendor security incidents can take considerable time to complete. Additional information regarding the scope of exposed records and impacted individuals may be disclosed as regulatory reviews continue.