HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIMediumContained

Prizm Media, Inc

bd_03bd7886d217f36c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 3, 2023

Filed

Jan 30, 2025

To disclose

19 months

Affected

107state residents only

Linked

4 filings

Confidence

66%

Full breach record for Prizm Media, Inc →

Prizm Media, Inc. notified Maryland AG of unauthorized access to an employee email account from April 28 to July 4, 2023. Data exposed included names, driver's license numbers, payment card info, and health insurance numbers. 107 Maryland residents were notified on Jan 30, 2025. Prizm engaged forensic specialists and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d19 months discovery → filing

Incident timeline

undetected · 66 days

discovery → filing · 19 months / 577 days

Apr 28, 2023

Begins

Jul 3, 2023

Discovered

Jan 30, 2025

Filed

vs. sector median

+64 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_406cde52fe3435842025-01-30Candidate
Washington State AGbd_7e440d36e39f40582025-01-30Verified
Vermont State AGbd_d8542356ba12b0622025-01-30Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Prizm Media, Inc
norm: prizm media
Industry: Technologyllm

Discovered: Jul 3, 2023
Breach occurred: Apr 28, 2023 – Jul 4, 2023
Undetected for: 66 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 30, 2025
Affected individuals: 107state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified the Maryland Office of the Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of third-party forensic specialists
Undertook a comprehensive review of the contents of the email account
Provided individuals whose personal information was potentially affected with access to credit monitoring services for one (1) year through IDX
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice of this incident to relevant state regulators
Provided written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Assessed the security of Prizm systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 months(577 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJan 30 · first

Washington State AGJan 30 · first

Vermont State AGJan 30 · first

Maryland State AGJan 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376271.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2025
Raw hash: b9057854ce173160e3b64de5f6d285836359793ac6712d01a1133fc82873bb3a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityPrizm Media, Inc

Incidentdiscovered Jul 3, 2023

Stated responseLaunched an investigation with the assistance of third-party forensic specialists

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov