HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
H2O.AI, INC.
bd_b08fbb3b839e8bb6 · schema v1 · pii pii-v1
Full breach record for H2O.AI, INC. →H2O.ai notified the Maryland Attorney General that a financially motivated threat actor accessed H2O systems between December 20, 2024, and January 29, 2025. The incident affected 12 Maryland residents, exposing payroll, SSNs, driver's license numbers, and addresses. H2O retained cybersecurity firms, reported to law enforcement, took the environment offline, and implemented enhanced monitoring.
Leak gap clock✗ Leak >180d14 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident
A leak claim by linkc about this victim predates this filing by 448 days.View originating leak claim
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376765.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2026
- Raw hash
- a7b179c2c4f17204d9d90cbbb57b9fb05b36fe4e6996981aafcd290ec2562459
Reporting entity
- Name
- H2O.AI, INC.norm: h2oai
- Domain
- h2o.ai
Victim entity
- Name
- H2O.AI, INC.norm: h2oai
- Domain
- h2o.ai
Incident
- Discovered
- Feb 18, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 months(429 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.