HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Hyde Shipping Corporation

bd_6ddac78cecff6abf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 13, 2022

Filed

Nov 15, 2022

To disclose

18 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Hyde Shipping Corporation →

Hyde Shipping Corporation notified the New Hampshire AG of a data event affecting 1 resident. Unauthorized access to an employee email account occurred between Feb 12 and July 12, 2022. Hyde Shipping became aware on July 13, 2022. Data at risk included names, SSNs, passport numbers, and credit/debit card info. Response included forensic investigation, credit monitoring via Kroll, and employee training.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 151 days

discovery → filing · 18 weeks / 125 days

Feb 12, 2022

Begins

Jul 13, 2022

Discovered

Nov 15, 2022

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_5a45441f4dc487652022-11-10 · +5dCandidate
Indiana State AGbd_bb5ecb295b0d4ea42022-11-10 · +5dVerified

Name: Hyde Shipping Corporation
norm: hyde shipping

Name: Hyde Shipping Corporation
norm: hyde shipping
Industry: Transportation & Logisticsllm

Discovered: Jul 13, 2022
Breach occurred: Feb 12, 2022 – Jul 12, 2022
Undetected for: 151 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 10, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Initiated an investigation into the nature and scope of the event with the assistance of third-party computer forensic specialists
Undertook a comprehensive and time-consuming review of the contents of the affected email account
Moved quickly to investigate and respond to the incident, assess the security of Hyde Shipping systems, and identify potentially affected individuals
Providing access to credit monitoring services for one (1) year through Kroll to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators, as necessary, and to the three major credit reporting agencies
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(125 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 10 · first

Indiana State AGNov 10 · first

New Hampshire State AG+5d · this page

Pattern: first filing Nov 10 (MT), last Nov 15 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hyde-shipping-corporation-20221115.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 15, 2022
Raw hash: ae54ab898b247c5b26055fd5d0bd5f6f94640f2e080baf08f3065838a8ad73b5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHyde Shipping Corporation

Victim entityHyde Shipping Corporation

Incidentdiscovered Jul 13, 2022

Stated responseInitiated an investigation into the nature and scope of the event with the assistance of third-party computer forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov