Hilldun Data Breach Exposes Social Security Numbers

Hilldun Corp., a New York City-based financial services company, disclosed a data breach that exposed Social Security numbers.

Founded in 1958, the company specializes in accounts receivable financing and factoring services for businesses in the fashion and consumer products industries.

The breach was reported to the Vermont Attorney General on July 24, 2026.

On Sept. 22, 2025, PLAY, a threat group, posted on the Tor network, claiming it had obtained data from the company. The group claimed to have stolen a broad range of sensitive information includinh confidential client documents, budget records, payroll information, accounting files, tax records, identification documents and financial information.

PLAY announced plans to publish the stolen data on Sept. 25, 2025.

The only type of personal information confirmed to have been exposed in the breach included Social Security numbers.

Hilldun's response to the breach

Given the sensitive nature of the data involved in this breach, individuals who receive a notification from Hilldun regarding the incident should act now to secure their information.