Social EngineeringTechnologyInformationPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)PIILowContained

Hudson Technologies, Inc

bd_d09d2d017a67f9a6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 28, 2024

Filed

Jul 17, 2024

To disclose

24 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for Hudson Technologies, Inc →

Hudson Technologies, Inc. notified affected individuals of an incident where an employee email account was accessed by an unauthorized party between Jan 28 and Feb 9, 2024. The breach likely resulted from phishing. Affected data included names and other PII. Hudson reset passwords, engaged forensic specialists, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 weeks / 171 days

Jan 28, 2024

Begins

Jan 28, 2024

Discovered

Jul 17, 2024

Filed

vs. sector median

+6 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_256aaaef514789932024-07-17Verified
Indiana State AGbd_7cb64baad7096fa32024-07-17Verified
Massachusetts State AGbd_101d79d82dad30de2024-07-18 · +1dVerified

Name: Hudson Technologies, Inc
norm: hudson technologies

Name: Hudson Technologies, Inc
norm: hudson technologies
Industry: Technologyllm

Discovered: Jan 28, 2024
Breach occurred: Jan 28, 2024 – Feb 9, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 22, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Performed a password reset
Engaged third-party specialists to assist in conducting a full investigation
Providing access to 12 months of credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(171 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGJul 17 · first

Indiana State AGJul 17 · first

Montana State AGJul 17 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1554.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2024
Raw hash: ae11821034548c13039f18f6a9f9accd098af4f445971b9b2241976f7fd21df7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHudson Technologies, Inc

Victim entityHudson Technologies, Inc

Incidentdiscovered Jan 28, 2024

Stated responsePerformed a password reset

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov