DisclosureLens
HackingTechnologyFinancial ServicesInformationStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

GoHenry

bd_c8211f50f181c7cb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 13, 2022

Filed

May 8, 2023

To disclose

30 weeks

Affected

13state residents only

Linked

5 filings

Confidence

65%
Full breach record for GoHenry

GoHenry Inc. reported unauthorized access to customer profiles between September 19 and October 13, 2022. The incident involved the theft of personal information, including government IDs, for children's accounts. GoHenry confirmed the breach on April 3, 2023, and notified affected individuals in May 2023. 13 Rhode Island residents were affected.

Incident timeline

undetected · 24 days
discovery → filing · 30 weeks / 207 days

Sep 19, 2022

Begins

Oct 13, 2022

Discovered

Apr 3, 2023

Scope determined

May 8, 2023

Filed

vs. sector median

+11 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGMay 8 · first
Maine State AGMay 8 · first
New Hampshire State AGMay 8 · first · this page

Pattern: first filing May 8 (MT), last Jun 8 (IN) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.