HackingTelecom & MediaInformationStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

SPRINT LLC

bd_03fb61bc40e498f9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 22, 2019

Filed

Aug 9, 2019

To disclose

7 weeks

Affected

34state residents only

Linked

5 filings

Confidence

67%

Full breach record for SPRINT LLC →4 incidents on file

Sprint Corporation notified South Carolina consumers of unauthorized access to customer accounts via the Samsung.com 'add a line' website. The breach involved account credentials used to access personal data including names, billing addresses, phone numbers, and financial account details. Sprint reset affected account PINs and secured accounts on June 25, 2019.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 48 days

Jun 22, 2019

Discovered

Aug 9, 2019

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Delaware State AGbd_6c0d5dd3f835d1642019-07-11 · +29dVerified
Montana State AGbd_e456f569def7964f2019-07-11 · +29dVerified
California State AGbd_1135a8076a8d32992019-07-03 · +37dVerified
Illinois State AGbd_07d17a42b85c77b52019-01-01 · +220dCandidate

Name: SPRINT CAPITAL CORPORATION
norm: sprint capital

Name: SPRINT LLC
norm: sprint
Domain: hub-sprint.com
Industry: Telecom & Mediallm

Discovered: Jun 22, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 34state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Secured your account from unauthorized access
Re-secured your account on June 25, 2019
Reset your PIN
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJan 1 · first

California State AG+183d

Delaware State AG+191d

Montana State AG+191d

South Carolina State AG+220d · this page

Pattern: first filing Jan 1 (IL), last Aug 9 (SC) — a 220-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2019/Sprint.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 9, 2019
Raw hash: 18ebac7f49f1f6450b1a5b2b33419514b13ccc066598a512443cbbd829078b17

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySPRINT CAPITAL CORPORATION

Victim entitySPRINT LLC

Incidentdiscovered Jun 22, 2019

Stated responseSecured your account from unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov