H&H Color Lab
ent_58a39938450f15e434227ec9
Disclosures
4
State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
2,177
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- H&H Color Lab
- Normalized
- h h color lab— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- Massachusetts State AGas victim2026-01-14
H&H Color Lab detected suspicious activity on July 31, 2025. Investigation revealed an unauthorized third party accessed their network on the night of July 30, 2025, and accessed or acquired some files. The company engaged third-party cybersecurity experts, notified law enforcement, and offered identity theft protection services to affected individuals.
- New Hampshire State AGas victim2026-01-13
H&H Color Lab, Inc. notified the New Hampshire Attorney General of a security incident affecting two NH residents. Unauthorized access occurred on July 30, 2025, detected on July 31, 2025. Impacted data included names, SSNs, driver's licenses, health insurance numbers, financial account numbers, and usernames/passwords. The company engaged forensic experts, reset passwords, rebuilt servers, and provided one year of credit monitoring. Notification was mailed on January 13, 2026.
- Maine State AGas victim2026-01-13
H&H Color Lab, Inc. reported an external system breach (hacking) on July 30, 2025, discovered July 31, 2025. The incident affected 2,177 individuals, including 4 Maine residents. Compromised data included names and government identifiers (SSN, driver's license). The company engaged third-party experts, notified law enforcement, and offered one year of Experian IdentityWorks credit monitoring.
- Nebraska State AGas victim2026-01-13
H&H Color Lab notified Nebraska residents of a data breach occurring on July 30, 2025, detected on July 31, 2025. An unauthorized third party accessed files containing personal information (names). The company engaged third-party experts, notified law enforcement, and offered complimentary credit monitoring via Experian.