MalwareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Hyper Ice, Inc.

bd_a3c360b3824c8dcf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 25, 2024

Filed

May 19, 2026

To disclose

—

Affected

58state residents only

Linked

8 records

Confidence

67%

Full breach record for Hyper Ice, Inc. →

Hyper Ice, Inc. experienced a ransomware incident on June 25, 2024, involving attempted encryption and unauthorized acquisition of files. The breach affected 58 Maryland residents, exposing first name, last name, and Social Security numbers. The company contained the incident, engaged forensic investigators, and notified law enforcement. Credit monitoring was offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 25, 2024

Discovered

May 19, 2026

Filed

This filing is one of 8 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_733621fc4041c4902024-06-25 · +694dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_43c5e99b4547e82c2025-01-06 · +499dVerified
New Hampshire State AGbd_4c6ad2c1071ad13a2025-01-06 · +499dVerified
Maine State AGbd_b36d95415c7975c72025-01-06 · +499dVerified
Massachusetts State AGbd_b7d3958587ccb4072025-01-06 · +499dVerified by operator

Show 2 more filings ↓up to 524d gap

Indiana State AGbd_824b293f9e3df8e22024-12-12 · +524dCandidate
Nebraska State AGbd_e7880dc01e6f2e9c2024-12-12 · +524dVerified

Name: Hyper Ice, Inc.
norm: hyper ice

Name: Hyper Ice, Inc.
norm: hyper ice
Domain: hyperice.com

Discovered: Jun 25, 2024
Materiality determined: —
Notification sent: Dec 12, 2024
Affected individuals: 58state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Maryland Attorney General

During the incident: Took steps to secure its network and contain the incident, which included shutting off all access to the network
Engaged a specialized third-party forensic incident response firm to assist with securing the network environment and determining the extent of the compromise
Engaged a data mining vendor to identify any potentially compromised personally identifiable information
Notified law enforcement
Wiped and rebuilt affected systems
Changes made: Changed passwords
Strengthened password requirements
Implemented multi-factor authentication
Offered free credit monitoring and identity theft protection through TransUnion
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGDec 12 · first

Nebraska State AGDec 12 · first

California State AG+25d

New Hampshire State AG+25d

Maine State AG+25d

Massachusetts State AG+25d

Maryland State AG+524d · this page

Pattern: first filing Dec 12 (IN), last May 19 (MD) — a 524-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 19, 2026
Raw hash: b4d7657c28bd2d5678b1762f622efa50ec5722042c564b8bcf2ba7322134fda4

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityHyper Ice, Inc.

Victim entityHyper Ice, Inc.

Incidentdiscovered Jun 25, 2024

Stated responseTook steps to secure its network and contain the incident, which included shutting off all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov