Where does the HEXPOL Holding Inc. case file come from?

Every entry is taken from the breach report HEXPOL Holding Inc. lodged with the California Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: HEXPOL Holding Inc. Data Breach

This file collects the dated facts on record for the HEXPOL Holding Inc. incident. The state report is dated July 3, 2025. The incident itself is dated December 22, 2024.

Timeline

193 days separate the incident date from the date it was reported.

December 22, 2024Incident dateWhen the filing says the breach took place.
July 3, 2025Report filed in CaliforniaDate the notice was lodged with the California Attorney General.

Case facts

Filing state: California
Date reported: July 3, 2025
Incident date: December 22, 2024
Receiving office: California Attorney General

Case notes

HEXPOL Holding Inc., based in California, has reported a data security incident to regulatory authorities. The company filed this report on July 3, 2025, concerning an event that initially took place on December 22, 2024.

The public filing does not detail the specific nature of the breach, such as whether it involved unauthorized access to systems, a ransomware attack, or another type of security compromise. Crucially, the filing also does not specify the exact categories of personal information that may have been exposed as a result of this incident. Therefore, the information involved is referred to in general terms.

As of the filing date, HEXPOL Holding Inc. has indicated that the incident is currently under investigation. This means that further details regarding the scope, cause, and impact of the breach may emerge as the investigation progresses.

For any individuals who receive a direct notification letter from HEXPOL Holding Inc. about this incident, it is important to carefully read all information provided. General protective measures often include monitoring financial statements for unusual activity, reviewing credit reports regularly for unauthorized accounts, and being cautious of unsolicited emails or calls that claim to be from the company.

This record serves as an official public documentation of the incident, as reported by HEXPOL Holding Inc. to regulators. It is provided to help individuals verify the legitimacy of any data breach notifications they may receive and understand the documented facts surrounding the event.

Questions about this case file

Where does the HEXPOL Holding Inc. case file come from?: Every entry is taken from the breach report HEXPOL Holding Inc. lodged with the California Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

California data breaches

Filing source: California Attorney General

Named in the HEXPOL Holding Inc. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More California case files