HackerOne Inc. experienced an external system breach, described as hacking, that occurred between December 22, 2025, and January 15, 2026. The company discovered this breach on January 23, 2026. The Maine Attorney General was notified on March 23, 2026.
The breach involved the exposure of names or other personal identifiers. A total of 287 individuals were affected, including 1 resident of Maine. HackerOne states they are a customer of Navia, implying this incident may have originated from a third-party vendor. Identity theft protection services through Kroll for 12-24 months were offered to impacted individuals.
More details may emerge as the investigation continues, and notifications to affected individuals may still be in process.