HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
Huntsman Building Solutions (USA) LLC
bd_588a8f7867c23647 · schema v1 · pii pii-v1
Full breach record for Huntsman Building Solutions (USA) LLC →Huntsman Building Solutions (USA) LLC notified Vermont AG that on Feb 11, 2025, an unauthorized third party accessed its information systems. The incident compromised names and potentially other personal data. HBS engaged a cybersecurity firm, blocked access, reported to law enforcement, and offered 24 months of credit monitoring. No evidence of misuse was found. The total number of affected individuals was not disclosed in the filing.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7904f8ea4ff93c98Indiana State AGfiled 2025-04-28(24d gap)Verified
- bd_d87a23fb7ac861cbVermont State AGfiled 2025-04-28(24d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-22-huntsman-building-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2025
- Raw hash
- 44b165f70ad280783e40306d58e87cc20e0134cf5fb109f10530e62f8c18625e
Reporting entity
- Name
- Huntsman Building Solutions (USA) LLCnorm: huntsman building solutions usa
- Domain
- huntsman.com
Victim entity
- Name
- Huntsman Building Solutions (USA) LLCnorm: huntsman building solutions usa
- Domain
- huntsman.com
Incident
- Discovered
- Feb 11, 2025
- Materiality determined
- —
- Notification sent
- May 22, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported this incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.