Hay House LLC
ent_02e0414ac36b5413
Disclosures
5
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
6,011
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Hay House LLC
- Normalized
- hay house— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- hayhouse.com
Disclosure history (5)newest first
- New Hampshire State AGas victim2024-12-16
Hay House, LLC notified the NH AG of unauthorized access to its website between Aug 3-6, 2024. Malicious code captured payment card data. Discovered Dec 5, 2024. 22 NH residents affected. Notifications sent Dec 1, 2024. Network contained; forensic investigation conducted.
- Montana State AGas victim2024-12-11
Hay House, LLC notified customers of a data security incident where malicious code on its website captured payment card data (names, card numbers, CVVs, expiration dates) entered between August 3-5, 2024. The company discovered the incident and determined the scope on December 5, 2024. Notices were sent on December 11, 2024. No evidence of identity fraud was found.
- Massachusetts State AGas victim2024-12-11
Hay House LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-11. 72 Massachusetts residents were affected.
- Maine State AGas victim2024-12-11
Hay House LLC reported an external system breach (hacking) affecting 6,011 individuals, including 19 in Maine. Unauthorized access occurred between August 3 and August 5, 2024, when malicious code on the website captured payment card data (names, card numbers, CVVs, expiration dates). The breach was discovered on December 5, 2024, and notifications were sent on December 11, 2024.
- Vermont State AGas victim2024-12-10
Hay House LLC notified consumers that malicious code on its website captured payment card data (names, card numbers, CVVs, expiration dates) entered between August 3-5, 2024. The incident was discovered on December 5, 2024. Forensic investigators were engaged. 13 Rhode Island residents were explicitly identified as impacted.