MalwareRansomwareData ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
HCI Group
bd_a6478b03672ad0ba · schema v1 · pii pii-v1
Full breach record for HCI Group →HCI, LLC experienced a malware attack on September 2, 2020, where an unauthorized person accessed and acquired files containing personal information of current and former employees. The company hired forensic investigators, notified the FBI, and enhanced network security. Affected individuals were offered 12 months of identity monitoring.
California clockDiscovered Sep 2, 2020 → Notified Jun 8, 2021279d ✗ CA 60-day late13 months discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-545233
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 13, 2021
- Raw hash
- ab961e4ec89f2ff4d95a588cfe634a838f6627352aab341fd3ebee3ee176b05b
Reporting entity
- Name
- HCI Groupnorm: hci group
- Domain
- hcigroup.com
Victim entity
- Name
- HCI Groupnorm: hci group
- Domain
- hcigroup.com
Incident
- Discovered
- Sep 2, 2020
- Materiality determined
- —
- Notification sent
- Jun 8, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation of the incident
Compliance
- Time to disclose
- 13 months(376 days from discovery to filing)
- Compliance flags
- CA 60-day late · 279d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 2, 2020→ Notified: Jun 8, 2021279d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.