Incident BriefingsAlma Family Services network incident

Alma Family Services network incident

Alma’s investigation could not determine whether specific employee information was accessed.

Last modified

Summary

  • Environment: Alma Family Services network and employee records
  • Operational impact: No operational outage quantified
  • Financial impact: No incident cost established in the reviewed evidence
  • Record status: Developing record. Reviewed October 23, 2026; updated as evidence emerges.

What happened

Alma Family Services became aware of possible unauthorized network access on July 10, 2026. It activated its response procedures and later notified current and former employees. [1]

Impact

The investigation could not determine whether particular materials were accessed. The employee notice identifies names but leaves additional fields unspecified. It does not establish patient exposure, confirmed theft or an affected-person total. [1]

Timeline

  1. Possible access detected

    Alma initiated incident response and secured systems.

    [1]

  2. Employee notice dated

    Alma explained the uncertainty about access to employee information.

    [1]

  3. Briefing updated

    This briefing was last reviewed and updated on October 23, 2026.

Threat Group & Attack Vector

The notice does not establish an entry method or attacker identity. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

Alma said it contained the incident, engaged cybersecurity experts and added safeguards and monitoring. It offered identity monitoring and restoration assistance to potentially affected people. [1]