DisclosureLens
HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)CriticalContained

HUB INTERNATIONAL LIMITED

bd_99495cf2eca88db8 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 27, 2023

Filed

Apr 17, 2024

To disclose

38 weeks

Affected · nationwide

514,4775,172 in this filing

Confidence

65%
Full breach record for HUB INTERNATIONAL LIMITED →3 incidents on file

Hub International Limited reported an external system breach (hacking) occurring between December 12, 2022, and January 17, 2023, discovered on July 27, 2023. The incident affected approximately 514,477 individuals, including 5,172 Maine residents. Acquired data included names and driver's license numbers. The company provided 12 months of credit monitoring and identity restoration services via Equifax.

Maine clockDiscovered Jul 27, 2023 → Filed with AG Apr 17, 2024265d ✗ ME AG >90d38 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 227 days
discovery → filing · 38 weeks / 265 days

Dec 12, 2022

Begins

Jul 27, 2023

Discovered

Apr 17, 2024

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed514,477 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.