Kahua, Inc.
bd_625bc402cc1baed5 · schema v1 · pii pii-v1
Full breach record for Kahua, Inc. →Kahua, Inc. notified consumers of a data incident occurring between Oct 25 and Nov 13, 2023. The company received a ransom note via email on Nov 13, 2023, but confirmed no files were actually encrypted. The incident involved unauthorized access to the internal administrative network, potentially exposing personal information including names and government IDs. Kahua engaged forensic investigators and is offering 4 years of credit monitoring and fraud assistance.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 25, 2023
Begins
Nov 13, 2023
Discovered
Jan 24, 2024
Filed
vs. sector median
8 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Massachusetts State AGbd_c7f92bd5d74c8f9b2024-01-23 · +1dVerified
- Indiana State AGbd_fdaf50fdd056b7e12023-12-15 · +40dCandidate
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Dec 15 (IN), last Jan 24 (VT) — a 40-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.