Hippo Analytics Inc. Data Breach Notice (Washington Attorney General)

The notice you received from Hippo Analytics Inc. means that your name, full date of birth, and Washington driver’s license or ID card number were exposed in an incident that occurred on January 30, 2025. The company filed its notification with the Washington State Attorney General on October 29, 2026 — 637 days later.

This long gap between the incident and the disclosure is the most striking detail in the filing. While notification timelines vary by state and depend on when an investigation concludes, nearly 21 months is unusually extended for any organization handling Washington resident data.

Driver’s License Numbers and Dates of Birth Create Permanent Identity Risk

The filing lists exactly three categories: name, driver’s license or Washington ID card number, and full date of birth. No passwords, no financial account numbers, and no Social Security numbers were exposed. That absence is meaningful — it removes the immediate risk of account takeover or credential-based fraud tied to this breach.

What remains is still serious. A date of birth combined with a driver’s license number gives fraudsters two of the most common pieces of information used to impersonate someone when opening new accounts, filing fraudulent tax returns, or verifying identity over the phone. Unlike a credit card, neither of these pieces of information can be canceled or reissued. They stay valid for identity theft for years.