Cyber Incident Victim: HackerOne
Date:
Mar 2026
Location:
United States of America
Summary
HackerOne experienced a data breach that exposed social security numbers and health-related personal information. The breach compromised personally identifiable information of individuals associated with the platform. The company, based in San Francisco, California, United States, confirmed that the exposed data included sensitive health details alongside social security numbers. No further specifics about the attack vector or the number of affected individuals were disclosed in the available source.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In March 2026, HackerOne experienced a data breach that exposed individuals' Social Security Numbers and health-related information. The incident was recorded in a compilation of ransomware and cyber attacks for that month, locating the breach in San Francisco, California, United States. The breach was identified as part of a broader trend of attacks targeting organizations during that period. No further specifics about the attack vector, threat actor, or timeline within March were provided in the source material.
The exposure of SSNs and health details represented a privacy impact for the affected individuals. The source does not provide information on the attack vector, threat actor identity, or specific timeline within March 2026. Likewise, no details are given regarding detection methods, containment actions, or notification procedures undertaken by HackerOne. Consequently, the confirmed facts are limited to the occurrence of the breach, the types of data exposed, and the location in San Francisco, California. No figures on the number of individuals affected or the volume of data exfiltrated are available from the article. Therefore, the description of the incident rests solely on the disclosed exposure of Social Security Numbers and health-related information.