Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)Government IDHighContained

The Hilb Group Operating Company, LLC

bd_b66e6cd9833ebd83 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 10, 2023

Filed

Nov 3, 2023

To disclose

42 weeks

Affected

6,254state residents only

Linked

7 filings

Confidence

65%

Full breach record for The Hilb Group Operating Company, LLC →

The Hilb Group Operating Company, LLC notified South Carolina authorities of a data breach affecting employee email accounts. Unauthorized access occurred between Dec 1, 2022, and Jan 12, 2023, discovered on Jan 10, 2023. PII including names and SSNs was exposed. Notices were sent in Oct 2023. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due42 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 40 days

discovery → filing · 42 weeks / 297 days

Dec 1, 2022

Begins

Jan 10, 2023

Discovered

Nov 3, 2023

Filed

vs. sector median

+25 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_5a9f4d90a43338612023-11-02 · +1dCandidate
Massachusetts State AGbd_65dd9889583ea0782023-11-02 · +1dVerified
Vermont State AGbd_67eab2b36e096a142023-11-02 · +1dVerified
Montana State AGbd_a48bfe51bd1a9f3f2023-11-02 · +1dVerified by operator

Show 2 more filings ↓up to 1d gap

Indiana State AGbd_aa2c63a413af11782023-11-02 · +1dVerified
California State AGbd_eb73cca33de903882023-11-02 · +1dVerified by operator

Name: The Hilb Group Operating Company, LLC
norm: the hilb group operating

Name: The Hilb Group Operating Company, LLC
norm: the hilb group operating
Industry: Professional Servicesllm

Discovered: Jan 10, 2023
Breach occurred: Dec 1, 2022 – Jan 12, 2023
Undetected for: 40 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 9, 2023
Affected individuals: 6,254state-resident count only
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the event
Secured the email accounts
Undertook a thorough investigation
Implemented additional technical safeguards
Offering complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar incidents from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(297 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Maine State AGNov 2 · first

Massachusetts State AGNov 2 · first

Vermont State AGNov 2 · first

Montana State AGNov 2 · first

Indiana State AGNov 2 · first

California State AGNov 2 · first

South Carolina State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/TheHilbGroupOperatingCompanyLLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 3, 2023
Raw hash: 5f8a65da061e29d5f20786bbaac25b2da7597e659d2290e527e63deb58803468

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe Hilb Group Operating Company, LLC

Victim entityThe Hilb Group Operating Company, LLC

Incidentdiscovered Jan 10, 2023

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the event

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov