UnknownLow
The Hanover INsurance Company and its subsidiary and affiliate insurance companies
bd_ad63d7ad92c61b23 · schema v1 · pii pii-v1
Full breach record for The Hanover INsurance Company and its subsidiary and affiliate insurance companies →The Hanover INsurance Company and its subsidiary and affiliate insurance companies reported a data breach to the Oregon Attorney General. The breach was reported on 2018-11-19. The breach occurred during 3/16/2018 - 3/16/2018. The breach was discovered on 8/30/2018. 460 individuals were affected. Notice was sent on 11/19/2018.
Oregon clock✗ OR AG >45d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed460 affectedView incident
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2018
- Raw hash
- e508fbc282bf4d4880b6d79e979c9abc7c668a9a7f06b426a55aea5db5849823
Reporting entity
- Name
- The Hanover INsurance Company and its subsidiary and affiliate insurance companiesnorm: the hanover insurance company and its subsidiary and affiliate insurance companies
Victim entity
- Name
- The Hanover INsurance Company and its subsidiary and affiliate insurance companiesnorm: the hanover insurance company and its subsidiary and affiliate insurance companies
Incident
- Discovered
- Aug 30, 2018
- Materiality determined
- —
- Notification sent
- Nov 19, 2018
- Affected individuals
- 460
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(81 days from discovery to filing)
- Compliance flags
- OR AG >45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.