How Alera Group Modernized DLP for Today’s World
The $1.6B insurance and financial services brokerage replaced a problematic data loss protection tool with ORION Security’s contextual, AI-native solution
At a glance:
This is the first topic
Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.
Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.
In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.
To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.
This is the second topic
Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.
Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.
In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.
To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.
This is the third topic
Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.
Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.
In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.
To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.
This is the forth topic
Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.
Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.
In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.
To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.
This is the fifth topic
Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.
Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.
In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.
To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.

.png)

