HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICLowContained
Huntington Financial
bd_5010e23f457f3f7e · schema v1 · pii pii-v1
Full breach record for Huntington Financial →Huntington Hospitality Financial Services Corp, a hospitality entity, notified Vermont AG of a data breach affecting consumer personal information. Unauthorized access occurred on or about December 12, 2024, discovered July 18, 2025. Affected data likely includes names and other identifiers. The company engaged cybersecurity experts, enhanced network security, and offered 12-24 months of credit monitoring via Identity Defense.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_fddfc7dbe80d3497California State AGfiled 2025-07-31Candidate
- bd_aa0f0e5e02e1437cTexas State AGfiled 2025-08-01(1d gap)Verified by operator
- bd_d25cb3d3a66cd368New Hampshire State AGfiled 2025-08-01(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-31-hhg-companies-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 31, 2025
- Raw hash
- e0c2fba052cfa7b4a2bbd75e9bc25b95d93103033b07d04c65a97194da984fa5
Reporting entity
- Name
- HHG Companiesnorm: hhg companies
Victim entity
- Name
- Huntington Financialnorm: huntington financial
- Domain
- hnatb.com
Incident
- Discovered
- Dec 12, 2024
- Materiality determined
- Jul 31, 2025
- Notification sent
- Jul 31, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 33 weeks(231 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.