HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDMediumContained

Hyper Ice, Inc.

bd_43c5e99b4547e82c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 6, 2025

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

69%

Full breach record for Hyper Ice, Inc. →2 incidents on file

Hyper Ice, Inc. experienced a network disruption on June 25, 2024, during which certain files may have been acquired without authorization. The investigation concluded December 3, 2024, identifying potential exposure of names and Social Security numbers. Affected individuals were notified via first-class mail on December 12, 2024, and offered 12 months of credit monitoring through Cyberscout/TransUnion.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jun 25, 2024

Begins

Jan 6, 2025

Filed

This filing is one of 8 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 195 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteplaybd_8bf48ceaeaad3bf32024-06-29 · +191dVerified by operator
Leak Siteplaybd_733621fc4041c4902024-06-25 · +195dVerified by operator

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_4c6ad2c1071ad13a2025-01-06Verified
Maine State AGbd_b36d95415c7975c72025-01-06Verified
Massachusetts State AGbd_b7d3958587ccb4072025-01-06Verified by operator
Indiana State AGbd_824b293f9e3df8e22024-12-12 · +25dCandidate

Show 1 more filing ↓up to 25d gap

Nebraska State AGbd_e7880dc01e6f2e9c2024-12-12 · +25dVerified

Name: Hyper Ice, Inc.
norm: hyper ice
Domain: hyperice.com

Name: Hyper Ice, Inc.
norm: hyper ice
Domain: hyperice.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jun 25, 2024
Materiality determined: —
Notification sent: Dec 12, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data Staged
Threat actor: External

During the incident: Took steps to secure the network environment upon discovering the incident
Engaged cybersecurity experts to conduct an investigation
Notified law enforcement
Wiped and rebuilt affected systems
Conducted extensive electronic discovery concluding on December 3, 2024
Notified affected individuals via first-class mail
Changes made: Taken steps to bolster our network security
Continually reviewing and revising technical safeguards and enhancements to prevent a similar incident
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout, a TransUnion company
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGDec 12 · first

Nebraska State AGDec 12 · first

New Hampshire State AG+25d

Maine State AG+25d

Massachusetts State AG+25d

California State AG+25d · this page

Pattern: first filing Dec 12 (IN), last Jan 6 (CA) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-596989
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 6, 2025
Raw hash: 979dc7c49b89dffe2d1c2670d98b525e9723972e4ebc9c63bf27927cc7e42cbc

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityHyper Ice, Inc.

Victim entityHyper Ice, Inc.

IncidentUnauthorized Access

Stated responseTook steps to secure the network environment upon discovering the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov