HackingStolen CredentialsDelayed DiscoveryPIICREDENTIALSLowContained
The Hilb Group Operating Company, LLC
bd_67eab2b36e096a14 · schema v1 · pii pii-v1
Full breach record for The Hilb Group Operating Company, LLC →The Hilb Group Operating Company, LLC notified consumers of a data breach involving unauthorized access to employee email accounts between December 1, 2022, and January 12, 2023. The incident was discovered on January 10, 2023. The breach may have exposed names and credentials. Hilb engaged third-party specialists, secured accounts, and offered credit monitoring services.
Vermont clock✗ VT AG >45 bday42 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5a9f4d90a4333861Maine State AGfiled 2023-11-02Candidate
- bd_a48bfe51bd1a9f3fMontana State AGfiled 2023-11-02Verified by operator
- bd_eb73cca33de90388California State AGfiled 2023-11-02Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-02-hilb-group-operating-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 2, 2023
- Raw hash
- 0412ca955f4e262b1bf961cade81de345a08f905dabb5681aaddf2b1ab58ee9a
Reporting entity
- Name
- The Hilb Group Operating Company, LLCnorm: the hilb group operating
Victim entity
- Name
- The Hilb Group Operating Company, LLCnorm: the hilb group operating
Incident
- Discovered
- Jan 10, 2023
- Materiality determined
- Nov 2, 2023
- Notification sent
- Oct 9, 2023
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 42 weeks(296 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.