HackerOne Confirms Data Breach After Unauthorized System Access

HackerOne Inc., a prominent technology company specializing in cybersecurity and vulnerability coordination, has disclosed a data security incident involving unauthorized access to its systems. The company filed its report with the Indiana Attorney General on March 18, 2026, concerning an event that occurred on December 22, 2025.

Public filings from HackerOne Inc. indicate that unauthorized parties gained access to its systems. While the specific categories of data involved are not detailed in the public record, individuals who received a notification letter from HackerOne should be aware that their personal information may have been part of this incident.

HackerOne has stated that it is currently conducting an investigation into the full scope and impact of this security compromise. The company is taking measures to address the situation and safeguard digital identities, as communicated directly to affected individuals.

Those who received a data breach notification from HackerOne should carefully review the information provided within that communication. It is advisable to remain alert for any unusual activity across their online accounts and financial statements.

As a general precaution, consider updating passwords for critical online services and enabling multi-factor authentication wherever possible. Be cautious of unsolicited communications, such as emails or messages, that ask for personal information, as these could be phishing attempts. These steps can help protect your data from potential misuse.