Social EngineeringTechnologyInformationPhishingDelayed DiscoveryIdentity (basic)PIILowContained

HopSkipDrive

bd_5b9dbc45bc576fc8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 25, 2023

Filed

Feb 3, 2024

To disclose

28 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for HopSkipDrive →2 incidents on file

HopSkipDrive notified consumers of a data incident occurring May 31–June 10, 2023, discovered July 25, 2023, after receiving a phishing email from an unknown threat actor claiming access to third-party apps. Impacted data included names, addresses, and emails. The company engaged forensic experts and offered complimentary TransUnion credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday28 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 55 days

discovery → filing · 28 weeks / 193 days

May 31, 2023

Begins

Jul 25, 2023

Discovered

Feb 3, 2024

Filed

vs. sector median

+17 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_2c4bfd8dbf0df0832024-02-03Verified
Montana State AGbd_0effe01819aaca822024-02-02 · +1dCandidate
California State AGbd_4d28f1139039e4522024-02-02 · +1dVerified
Maine State AGbd_d815966810d8f7532024-02-02 · +1dVerified

Show 1 more filing ↓up to 2d gap

Illinois State AGbd_b11da8949437e91e2024-02-01 · +2dVerified

Name: HopSkipDrive
norm: hopskipdrive
Domain: admin.hopskipqa.com

Name: HopSkipDrive
norm: hopskipdrive
Domain: admin.hopskipqa.com
Industry: Technologyllm

Discovered: Jul 25, 2023
Breach occurred: May 31, 2023 – Jun 10, 2023
Undetected for: 55 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 3, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Launched an investigation
Engaged experts to assist in assessing the scope of the incident
Took steps to mitigate the potential impact
Arranged for you to activate, at no cost to you, TransUnion credit monitoring
Providing you with proactive fraud assistance
Changes made: Strengthening our systems’ security to prevent a similar event from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(193 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGFeb 1 · first

Montana State AG+1d

California State AG+1d

Maine State AG+1d

Massachusetts State AG+2d

Vermont State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-02-03-hopskipdrive-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2024
Raw hash: 00659c1d133d825f65e5b708b7e3473bd794949cea69f9cbff5da48c9f90c466

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityHopSkipDrive

Victim entityHopSkipDrive

Incidentdiscovered Jul 25, 2023

Stated responseLaunched an investigation

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov