Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Hudson Technologies, Inc
bd_256aaaef51478993 · schema v1 · pii pii-v1
Full breach record for Hudson Technologies, Inc →Hudson Technologies, Inc. notified consumers of a data breach involving unauthorized access to an employee email account between Jan 28 and Feb 9, 2024. The incident likely resulted from phishing, leading to credential compromise. Affected data included names and other data elements. Hudson engaged third-party investigators, reset passwords, and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday24 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7cb64baad7096fa3Indiana State AGfiled 2024-07-17Verified
- bd_d09d2d017a67f9a6Montana State AGfiled 2024-07-17Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-17-hudson-technologies-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2024
- Raw hash
- 18385691328b68c3725d165b01ecb702a3e1098c96e19f87eac7e441c91d14d0
Reporting entity
- Name
- Hudson Technologies, Incnorm: hudson technologies
Victim entity
- Name
- Hudson Technologies, Incnorm: hudson technologies
Incident
- Discovered
- Jan 28, 2024
- Materiality determined
- —
- Notification sent
- Jul 17, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 24 weeks(171 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.