H2O.AI, INC.

H2O.ai notified the Maryland Attorney General that a financially motivated threat actor accessed H2O systems between December 20, 2024, and January 29, 2025. The incident affected 12 Maryland residents, exposing payroll, SSNs, driver's license numbers, and addresses. H2O retained cybersecurity firms, reported to law enforcement, took the environment offline, and implemented enhanced monitoring.

H2O.ai, a technology company, experienced an external system breach or hacking incident that occurred from December 20, 2024, to January 29, 2025. The breach was discovered on February 18, 2025. The company notified the single affected Maine resident on March 27, 2025, and offered 12 months of identity theft protection services through Experian IdentityWorks.

H2O.ai reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-20 and was reported on 2025-03-27. 1 Indiana residents were affected. 734 individuals affected in total.

As a result of our operation, we have discovered the following concerning data: 1. Unanonymized customer datasets intended for AI training. 2. Full source code of programs from the Git repository, including code for driverless systems, GPT models, and others. 3. A substantial amount of internal information, including contracts, customer personal data, project costs, and project documentation. 4. Backup copies of employee email accounts containing customer correspondence.