Where does the H2O.ai case file come from?

Every entry is taken from the breach report H2O.ai lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: H2O.ai Data Breach

This file collects the dated facts on record for the H2O.ai incident. The state report is dated March 27, 2025. The incident itself is dated December 20, 2024.

Timeline

97 days separate the incident date from the date it was reported.

December 20, 2024Incident dateWhen the filing says the breach took place.
March 27, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: March 27, 2025
Incident date: December 20, 2024
Receiving office: Indiana Attorney General

Case notes

H2O.ai, a technology company specializing in artificial intelligence and machine learning software, filed a data breach report with the Indiana Attorney General's office on March 27, 2025. This filing acknowledges a data security incident where unauthorized access to their systems was identified. The company stated the breach occurred on December 20, 2024.

The specific types of data affected by this incident were not detailed in the public filing. However, the report indicates that personal information may have been exposed due to the unauthorized access. As a tech-focused entity, H2O.ai typically handles various forms of sensitive data, including user account credentials and professional contact details.

If you have received a data breach notification letter from H2O.ai, it signifies that your personal information was potentially involved in this security event. These notices are issued to inform affected individuals and guide them on necessary precautions to safeguard their digital identity following the incident.

To protect yourself, it is advisable to remain alert for any suspicious communications or unsolicited requests for personal details. Regularly review your online account statements and consider changing passwords for any accounts that may have used similar login credentials. Additionally, monitoring your credit reports can help detect any fraudulent activity that might arise from the exposure of your data.

Questions about this case file

Where does the H2O.ai case file come from?: Every entry is taken from the breach report H2O.ai lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files