HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
HUB INTERNATIONAL LIMITED
bd_99495cf2eca88db8 · schema v1 · pii pii-v1
Full breach record for HUB INTERNATIONAL LIMITED →Hub International Limited reported an external system breach (hacking) occurring between December 12, 2022, and January 17, 2023, discovered on July 27, 2023. The incident affected approximately 514,477 individuals, including 5,172 Maine residents. Acquired data included names and driver's license numbers. The company provided 12 months of credit monitoring and identity restoration services via Equifax.
Maine clockDiscovered Jul 27, 2023 → Filed with AG Apr 17, 2024265d ✗ ME AG >90d38 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed514,477 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac0d11b7-c862-4505-8157-27d0a8583285.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2024
- Raw hash
- ec77bad0c1ea424ced7b1682af718f5772b537fe9cc1ff4f612be45561df091a
Reporting entity
- Name
- HUB INTERNATIONAL LIMITEDnorm: hub international
- Domain
- hubinternational.com
Victim entity
- Name
- HUB INTERNATIONAL LIMITEDnorm: hub international
- Domain
- hubinternational.com
Incident
- Discovered
- Jul 27, 2023
- Materiality determined
- —
- Notification sent
- Apr 12, 2024
- Affected individuals
- 514,477
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 38 weeks(265 days from discovery to filing)
- Compliance flags
- ME AG >90d · 265dME resident >180d · 260d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 27, 2023→ Filed with AG: Apr 17, 2024265d 90 days ME AG >90d Maine Discovered: Jul 27, 2023→ Notified: Apr 12, 2024260d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.