Where does the H2O.ai case file come from?

Every entry is taken from the breach report H2O.ai lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: H2O.ai Data Breach

This file collects the dated facts on record for the H2O.ai incident. The state report is dated March 27, 2025. The incident itself is dated December 20, 2024.

Timeline

97 days separate the incident date from the date it was reported.

December 20, 2024Incident dateWhen the filing says the breach took place.
March 27, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: March 27, 2025
Incident date: December 20, 2024
Receiving office: Indiana Attorney General

Case notes

H2O.ai, a company specializing in artificial intelligence and machine learning platforms, has filed a data breach notification with the state of Indiana concerning a security incident that occurred late last year.

The breach, which H2O.ai identified on December 20, 2024, led to a filing with state regulators on March 27, 2025. The official record does not specify the types of personal information that may have been exposed, nor does it provide an estimate of how many individuals were potentially affected. H2O.ai has noted that the incident remains under investigation.

Individuals who receive a direct notification from H2O.ai should carefully review the letter for specific details pertinent to their situation. Such notifications typically provide the most precise information regarding what data was involved and any steps the company is taking or recommending.

Given the general nature of data breaches, it is widely recommended that individuals remain vigilant. Monitor your financial accounts for any unusual activity and be cautious of unsolicited communications, such as emails, texts, or phone calls, that request personal details.

As a general precaution, consider reviewing your credit reports periodically. Many financial experts also suggest placing a fraud alert or security freeze on your credit files, which can help prevent new accounts from being opened in your name without your authorization. This is a common step to take when your personal information may have been compromised, regardless of the specific data types involved.

Questions about this case file

Where does the H2O.ai case file come from?: Every entry is taken from the breach report H2O.ai lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the H2O.ai breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files