HackingManufacturingManufacturingVulnerability ExploitPatch Available Not AppliedCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

HYPERTHERM, INC.

bd_54bb8f1d73c9b17d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 13, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for HYPERTHERM, INC. →2 incidents on file

Hypertherm, Inc. notified Massachusetts residents of an incident involving a vulnerability in Oracle E-Business Suite software. The company applied the Oracle-developed patch and took other security measures. Affected individuals were offered two years of complimentary identity monitoring through Kroll. The incident involved personal information, including Social Security numbers.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Mar 13, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Part of ORACLE CORPORATION supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_16da411c2f709b2e2025-11-21 · +111dVerified

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_596f4d56396a82742026-03-13Verified by operator
Maine State AGbd_8e18d57ba22274372026-03-13Verified
Vermont State AGbd_e8719f6dfc09ffbd2026-03-13Verified

Name: HYPERTHERM, INC.
norm: hypertherm
Domain: hypertherm.com

Name: HYPERTHERM, INC.
norm: hypertherm
Domain: hypertherm.com
Industry: Manufacturingllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Applied the patch that Oracle developed after the vulnerability was discovered
Took other measures to secure our Oracle EBS implementation
Secured the services of Kroll to provide identity monitoring at no cost to you for two years
Changes made: Applied the patch that Oracle developed after the vulnerability was discovered
Took other measures to secure our Oracle EBS implementation
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMar 13 · first

Maine State AGMar 13 · first

Vermont State AGMar 13 · first

Massachusetts State AGMar 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-392-hypertherm-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2026
Raw hash: 2ba75e9957dcc0ca0a3b77d1ecc0159f6c1d410a570641b4d4cd1712d3721bc4

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityHYPERTHERM, INC.

Victim entityHYPERTHERM, INC.

IncidentUnauthorized Access

Stated responseApplied the patch that Oracle developed after the vulnerability was discovered

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov