HackingCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
HUB INTERNATIONAL LIMITED
bd_5121814598643152 · schema v1 · pii pii-v1
Full breach record for HUB INTERNATIONAL LIMITED →Hub International Limited notified New Hampshire residents of an unauthorized access event. Suspicious activity was identified on January 17, 2023, following unauthorized file copying between December 2022 and January 2023. HUB isolated systems, engaged in forensic investigation, and reported the incident to law enforcement. Personal information, including SSNs and financial account data, was potentially compromised. HUB provided 688 NH residents with credit monitoring services via Equifax.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_002a2ce297ea740dWashington State AGfiled 2023-08-11Candidate
- bd_8ba4c7ba5b2546f1Montana State AGfiled 2023-08-11Candidate
- bd_ab8a57e9569b7698Oregon State AGfiled 2023-08-11Verified by operator
- bd_be646bfc1afb7c83Maine State AGfiled 2023-08-11Verified by operator
Show 2 more filings ↓Show fewer ↑
- bd_beca12727c6cf68fCalifornia State AGfiled 2023-08-11Verified
- bd_f282f01074b65565Vermont State AGfiled 2023-08-11Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hub-international-limited-20230811.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 11, 2023
- Raw hash
- 0aaf1b3fe2eef74668631062191562b6c788c80c993153eb90e5552f751a3526
Reporting entity
- Name
- HUB INTERNATIONAL LIMITEDnorm: hub international
Victim entity
- Name
- HUB INTERNATIONAL LIMITEDnorm: hub international
Incident
- Discovered
- Jan 17, 2023
- Materiality determined
- Jul 27, 2023
- Notification sent
- Aug 11, 2023
- Affected individuals
- 688
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this event to law enforcementProvided written notice to state regulators
Compliance
- Time to disclose
- 29 weeks(206 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.