HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountIdentity (basic)Government IDPCIMediumContained

HUDSON EXECUTIVE CAPITAL LP

bd_6bf42fedc778f072 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 5, 2026

Filed

Jun 9, 2026

To disclose

5 weeks

Affected

3state residents only

Confidence

65%

Full breach record for HUDSON EXECUTIVE CAPITAL LP →2 incidents on file

Hudson Executive Capital LP (HEC) notified individuals of a data security incident involving a third-party file access platform used previously by HEC. Unauthorized access occurred in October 2025, exposing personal information including names and potentially government identifiers. HEC engaged cybersecurity experts, terminated the platform, and offers 24 months of credit monitoring via IDX. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d5 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 216 days

discovery → filing · 5 weeks / 35 days

Oct 1, 2025

Begins

May 5, 2026

Discovered

Jun 9, 2026

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: HUDSON EXECUTIVE CAPITAL LP
norm: hudson executive
Domain: hudsonexecutive.com

Name: HUDSON EXECUTIVE CAPITAL LP
norm: hudson executive
Domain: hudsonexecutive.com
Industry: Financial Servicesllm

Discovered: May 5, 2026
Breach occurred: Oct 1, 2025 – Oct 31, 2025
Undetected for: 216 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 29, 2026
Affected individuals: 3state-resident count only
Data types: Financial accountIdentity (basic)Government IDPCI
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Initial access: supply_chain

During the incident: Engaged independent cybersecurity experts to assist with the investigation
Terminated use of the file access platform
Had experts execute thorough scans of HEC files
Offered complimentary identity protection services through IDX
Changes made: Terminated use of the file access platform
Had experts execute thorough scans of HEC files to ensure proper security measures were in place
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: MA AG >30dLeak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-931-hudson-executive-capital-lp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 9, 2026
Raw hash: 30f8c1403d8bdc57b5627083148d14fb316d168f6a8a510c2944a5592d2de6c5

Reporting entityHUDSON EXECUTIVE CAPITAL LP

Victim entityHUDSON EXECUTIVE CAPITAL LP

Incidentdiscovered May 5, 2026

Stated responseEngaged independent cybersecurity experts to assist with the investigation

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov