October 7, 20265 min. read

How Alera Group Modernized DLP for Today’s World

The $1.6B insurance and financial services brokerage replaced a problematic data loss protection tool with ORION Security’s contextual, AI-native solution

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

At a glance:

1–2→1
Dedicated DLP roles reduced to one SME spending only a few hours a day in ORION
1–2→1
Dedicated DLP roles reduced to one SME spending only a few hours a day in ORION
1–2→1
Dedicated DLP roles reduced to one SME spending only a few hours a day in ORION
1–2→1
Dedicated DLP roles reduced to one SME spending only a few hours a day in ORION
1–2→1
Dedicated DLP roles reduced to one SME spending only a few hours a day in ORION
1–2→1
Dedicated DLP roles reduced to one SME spending only a few hours a day in ORION

‍

This is the first topic

Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.

Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.

In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.

To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.

This is the second topic

Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.

Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.

In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.

To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.

‍

There’s no question in my mind that ORION has solved for the pain and agony of prior DLP. It’s completely changed the DLP landscape.

‍

This is the third topic

Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.

Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.

In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.

To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.

‍

Deploy agent
ORION
Deploy agent
ORION
Deploy agent
ORION

‍

This is the forth topic

Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.

Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.

In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.

To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.

‍

Deploy agent
ORION
Deploy agent
ORION

‍

This is the fifth topic

Alera Group is one of the largest independent insurance and financial services brokerages in the U.S.,with $1.6 billion in revenue and 5,000 employees. It manages coverage and benefits for businesses across the country, and is responsible for the safekeeping of personal data for hundreds of thousands of people: Social Security numbers, health records, and financial information.

Protecting that data became significantly more complex as Alera grew. The company had expanded rapidly through about 120 acquisitions, leaving Alera with a patchwork of security tools, inconsistent security maturity across businesses, and little centralized visibility. A publicly disclosed data breach in 2024 sharpened the urgency further.

In response, Alera accelerated a company-wide "One Alera" initiative to standardize systems, tools, and security practices across more than 160 locations, while maintaining HIPAA, SOC 2 Type 2, and other evolving compliance requirements.

To lead that effort, Alera brought on Matthew Mudry as CISO in 2025. His mandate was to build greater visibility, consistency, and control across the security environment, including a modern approach to data loss prevention.

‍

There’s no question in my mind that ORION has solved for the pain and agony of prior DLP. It’s completely changed the DLP landscape.

Explore more case studies

ORION Labs Case Files

How One Stolen Login Exposed Data on 192.7 Million People at Change Healthcare

One stolen support-desk login, a portal with no MFA, and nine days before anyone noticed led to about $3 billion in costs. ORION Labs maps each path the data takes and where it could be stopped.

October 9, 2026
ORION Labs Case Files

How 12,000 Files Left Pfizer Through a Personal Google Drive

A departing employee's USB drive was blocked, but logs of the employee's uploads to a personal Google Drive went unread for six days. ORION Labs maps each path the data takes and where it could be stopped.

October 8, 2026
Guides & Explainers

How Much Does Enterprise DLP Cost?

Published DLP list prices run about $50 to $144 per user a year. See how vendors price it, what drives cost up, and the people cost most budgets miss.

October 6, 2026