MalwareRansomwareData EncryptedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
H MART, INC.
bd_9a4b535a579353e0 · schema v1 · pii pii-v1
Full breach record for H MART, INC. →H Mart, Inc. notified employees of a security incident discovered on July 18, 2021, involving encrypted files on corporate systems. The incident potentially exposed personal identifying information, including names, birth dates, and social security numbers. The company engaged cybersecurity professionals, reported the matter to federal law enforcement, and offered two years of credit monitoring via Experian. The investigation was ongoing at the time of notification.
California clockDiscovered Jul 18, 2021 → Notified Aug 23, 202136d ✓ CA 60-day OK5 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-544090
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2021
- Raw hash
- 7aba230d979ccbcf07a4adc5e1977c10d0ab019416760e3d528ff7bbf8df51c9
Reporting entity
- Name
- H MART, INC.norm: h mart
Victim entity
- Name
- H MART, INC.norm: h mart
Incident
- Discovered
- Jul 18, 2021
- Materiality determined
- —
- Notification sent
- Aug 23, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Reported to federal law enforcement
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 36d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 18, 2021→ Notified: Aug 23, 202136d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.