HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Web Hosting Hub, Inc.

bd_8a948a3d21468a14 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 29, 2025

Filed

Apr 20, 2026

To disclose

25 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Web Hosting Hub, Inc. →

Web Hosting Hub, Inc. notified Washington AG of a security incident involving its Help Center. Unauthorized access occurred between April 17, 2025, and October 29, 2025. The incident involved the exposure of email addresses, IP addresses, and public social media information. No financial or sensitive personal data was accessed. The company engaged cybersecurity experts and law enforcement, contained the breach, and issued notifications on April 6, 2026.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 195 days

discovery → filing · 25 weeks / 173 days

Apr 17, 2025

Begins

Oct 29, 2025

Discovered

Apr 20, 2026

Filed

vs. sector median

+6 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_fb5bb087a2dabf852026-04-21 · +1dCandidate
Texas State AGbd_683d1d1e4242fd302026-04-22 · +2dVerified

Name: Web Hosting Hub, Inc.
norm: web hosting hub
Domain: webhostinghub.com

Name: Web Hosting Hub, Inc.
norm: web hosting hub
Domain: webhostinghub.com
Industry: Technologyllm

Discovered: Oct 29, 2025
Breach occurred: Apr 17, 2025 – Oct 29, 2025
Undetected for: 195 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: investigated the matter with the assistance of law enforcement
Initial access: exploit_public_facing

During the incident: Investigated the matter with the assistance of independent cybersecurity experts and law enforcement
Contained the incident
Took the affected systems offline
Implemented additional security measures to prevent recurrence
Fully secured the affected webpage and strengthened our security controls, including enhanced monitoring and access restrictions
Notifying all potentially affected individuals (i.e., customers and visitors) as required by applicable law
Continue to monitor for any signs of misuse related to this incident
Documented the breach internally as required by applicable law
Changes made: Fully secured the affected webpage and strengthened our security controls, including enhanced monitoring and access restrictions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(173 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Washington State AGApr 20 · first · this page

California State AG+1d

Texas State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA37833.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2026
Raw hash: 216549835e3286a68a09faf166b39dfb6b1177c4434000837814ae235fa676b9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWeb Hosting Hub, Inc.

Victim entityWeb Hosting Hub, Inc.

Incidentdiscovered Oct 29, 2025

Stated responseInvestigated the matter with the assistance of independent cybersecurity experts and law enforcement

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com