The Maine Office of the Attorney General disclosed that Hydromax USA suffered a data breach between April 19–24, 2022, when an unauthorized actor infiltrated its network and exfiltrated files. The incident potentially compromised the personal information of 255 individuals, including at least one Maine resident. While the exact type of data exposed was not detailed, the breach prompted the company to issue written notifications to affected parties on June 15, 2022, alongside offering one year of identity theft protection services via Kroll as a remedial measure. The breach highlights vulnerabilities in Hydromax USA’s cybersecurity defenses, raising concerns over unauthorized access to sensitive data, though no immediate financial fraud or large-scale exploitation was reported in the aftermath.
TPRM report: https://www.rankiteo.com/company/hydromax-usa
"id": "hyd1012091725",
"linkid": "hydromax-usa",
"type": "Breach",
"date": "4/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 255,
'name': 'Hydromax USA',
'type': 'Company'}],
'customer_advisories': 'Written notice provided to affected individuals on '
'June 15, 2022, with one year of identity theft '
'protection services offered via Kroll.',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 255,
'personally_identifiable_information': True},
'date_publicly_disclosed': '2022-06-15',
'description': 'The Maine Office of the Attorney General reported that '
'Hydromax USA experienced a data breach between April 19, '
'2022, and April 24, 2022, where an unknown actor accessed its '
'network and downloaded files without authorization, '
'potentially affecting 255 individuals, including one resident '
'of Maine. Written notice was provided to the affected '
'individual on June 15, 2022, and identity theft protection '
'services through Kroll were offered for one year.',
'impact': {'data_compromised': True, 'identity_theft_risk': True},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Written notice to affected '
'individuals',
'third_party_assistance': 'Kroll (identity theft protection '
'services)'},
'threat_actor': 'Unknown',
'title': 'Hydromax USA Data Breach (April 2022)',
'type': 'Data Breach'}