HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Horizontal Integration, Inc.

bd_9d337438cb51e1dd · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 9, 2024

Filed

Oct 29, 2024

To disclose

16 weeks

Affected · nationwide

6,34510 in this filing

Linked

4 filings

Confidence

65%

Full breach record for Horizontal Integration, Inc. →2 incidents on file

Horizontal Integration, Inc. reported an external system breach (hacking) occurring between July 3 and July 11, 2024. The company discovered unexpected network activity on July 9, 2024. Unauthorized access resulted in the exfiltration of names and Social Security numbers from approximately 6,345 individuals, including 10 Maine residents. Notices were sent on October 29, 2024, offering 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 9, 2024 → Filed with AG Oct 29, 2024112d ✗ ME AG >90d16 weeks discovery → filing

Incident timeline

undetected · 6 days

discovery → filing · 16 weeks / 112 days

Jul 3, 2024

Begins

Jul 9, 2024

Discovered

Oct 29, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_03b6870d9d8c1b1c2024-10-29Candidate
Vermont State AGbd_1dce80056750ffb22024-10-29Verified
New Hampshire State AGbd_489e4e6e7a9a7bda2024-10-29Verified

Name: Horizontal Integration, Inc.
norm: horizontal integration
Domain: horizontal.com

Name: Horizontal Integration, Inc.
norm: horizontal integration
Domain: horizontal.com
Industry: Technologyllm

Discovered: Jul 9, 2024
Breach occurred: Jul 3, 2024 – Jul 11, 2024
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 29, 2024
Affected individuals: 6,345state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Initial access: exploit_public_facing

During the incident: Worked to secure its systems
With the assistance of third-party cybersecurity specialists, began investigating
Undertook a comprehensive review of the data at risk
Providing access to credit monitoring services for two (2) years, through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Reviewing and updating existing policies and procedures relating to data protection and security
Implemented additional security measures designed to mitigate risk associated with this event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: ME AG >90d · 112d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 9, 2024
→ Filed with AG: Oct 29, 2024
112d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 9, 2024 → Filed with AG: Oct 29, 2024	112d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGOct 29 · first

Vermont State AGOct 29 · first

New Hampshire State AGOct 29 · first

Maine State AGOct 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/acb0a7f3-a644-4231-a2aa-43fcafd859c2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 29, 2024
Raw hash: 3fcb776c610d52815068a6346ae654477101a0ef021469503a7182d023bae209

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHorizontal Integration, Inc.

Victim entityHorizontal Integration, Inc.

Incidentdiscovered Jul 9, 2024

Stated responseWorked to secure its systems

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov