HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
HEXPOL Holding Inc.
bd_36e626e401cfa070 · schema v1 · pii pii-v1
Full breach record for HEXPOL Holding Inc. →On December 22, 2024, HEXPOL Compounding Americas detected unauthorized access to its network. An investigation revealed that an unauthorized actor may have copied certain files from the network. The scope of impacted personal information was confirmed on June 25, 2025 after extensive manual review. One Maine resident was affected out of 1,723 total individuals. Affected individuals were offered 24-month Experian IdentityWorks credit monitoring and identity restoration services.
Maine clockDiscovered Dec 22, 2024 → Filed with AG Jul 8, 2025198d ✗ ME AG >90d28 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1c3789a3794c78eeIndiana State AGfiled 2025-07-03(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/544819e6-e3d0-4266-a965-a6caaba7af60.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2025
- Raw hash
- a5f1e8f03eedd46c57a0bc9646923d80056693d12eaf7227884ba713546e8bfd
Reporting entity
- Name
- HEXPOL Holding Inc.norm: hexpol holding
- Industry
- Other Commercial
Victim entity
- Name
- HEXPOL Holding Inc.norm: hexpol holding
- Industry
- Other Commercial
Incident
- Discovered
- Dec 22, 2024
- Materiality determined
- Jun 25, 2025
- Notification sent
- Jul 3, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- ME AG >90d · 198dME resident >180d · 193d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 22, 2024→ Filed with AG: Jul 8, 2025198d 90 days ME AG >90d Maine Discovered: Dec 22, 2024→ Notified: Jul 3, 2025193d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.