HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLOCATIONMETADATALowResolved
Web Hosting Hub, Inc.
bd_fb5bb087a2dabf85 · schema v1 · pii pii-v1
Full breach record for Web Hosting Hub, Inc. →Web Hosting Hub, Inc. disclosed an unauthorized access incident affecting its Help Center. An external actor gained temporary access between April 17, 2025, and October 29, 2025, when the company detected the activity. The incident involved email addresses, IP addresses, and public-facing social media information. No financial data, passwords, or sensitive personal data were accessed. The company contained the incident, took systems offline, and engaged cybersecurity experts and law enforcement. The investigation is complete.
California clockDiscovered Oct 29, 2025 → Notified Apr 6, 2026159d ✗ CA 60-day late25 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_683d1d1e4242fd30Texas State AGfiled 2026-04-22(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-622075
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 21, 2026
- Raw hash
- 8c4048703b06d4eed423b4bfe60d868df428f7274aeb272e4881daf35b09939e
Reporting entity
- Name
- Web Hosting Hub, Inc.norm: web hosting hub
- Domain
- webhostinghub.com
Victim entity
- Name
- Web Hosting Hub, Inc.norm: web hosting hub
- Domain
- webhostinghub.com
Incident
- Discovered
- Oct 29, 2025
- Materiality determined
- —
- Notification sent
- Apr 6, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICLOCATIONMETADATA
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Coordinated with law enforcement authorities
Compliance
- Time to disclose
- 25 weeks(174 days from discovery to filing)
- Compliance flags
- CA 60-day late · 159dCA AG copy ≤15d · 15d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 29, 2025→ Notified: Apr 6, 2026159d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Apr 6, 2026→ AG copy submitted: Apr 21, 202615d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.