DisclosureLens
HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Hidden Valley Insurance, Inc.

bd_32698f401f0bc33d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 14, 2022

Filed

Apr 6, 2022

To disclose

23 days

Affected · nationwide

3071 in this filing

Confidence

66%
Full breach record for Hidden Valley Insurance, Inc.2 incidents on file

Hidden Valley Insurance, Inc. reported an external system breach (hacking) occurring between July 26, 2021, and July 30, 2021. The incident compromised the names and driver's license numbers of 307 individuals, including one Maine resident. The breach was discovered on March 14, 2022, and written notifications were sent to affected individuals on April 4, 2022. Credit monitoring was offered to those whose Social Security numbers were potentially compromised.

Maine clockDiscovered Mar 14, 2022Filed with AG Apr 6, 202223d ME AG ≤30d23 days discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 231 days
discovery → filing · 23 days

Jul 26, 2021

Begins

Mar 14, 2022

Discovered

Apr 6, 2022

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed307 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.