HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Title 9 Sports, Inc.
bd_04c152704d29a125 · schema v1 · pii pii-v1
Full breach record for Title 9 Sports, Inc. →Title 9 Sports, Inc. reported an external system breach in which unauthorized actors accessed files on their network beginning November 2, 2024 using a compromised account, which was disabled on November 8, 2024 when the activity was discovered. The files contained names, contact information, and Social Security Numbers. 12 Maine residents were among the 1,122 total individuals affected. Notifications were sent February 21, 2025. IDX identity protection services were offered for 12 months.
Maine clockDiscovered Nov 8, 2024 → Filed with AG Feb 19, 2025103d ✗ ME AG >90d15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_080d16c8489b08e5Montana State AGfiled 2025-02-20(1d gap)Verified
- bd_377c756a200d8304California State AGfiled 2025-02-18(1d gap)Candidate
- bd_da2721e0d5ed2721Vermont State AGfiled 2025-02-21(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0aa11435-9a70-4f1e-8462-495be7e39e42.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 19, 2025
- Raw hash
- 2467346cba263c499ee6fba914f9623f2c37f6460d8ddeb84425fe3eddb78d5c
Reporting entity
- Name
- Title 9 Sports, Inc.norm: title 9 sports
- Industry
- Other Commercial
Victim entity
- Name
- Title 9 Sports, Inc.norm: title 9 sports
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Nov 8, 2024
- Materiality determined
- —
- Notification sent
- Feb 21, 2025
- Affected individuals
- 12
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1530 Data from Cloud Storage
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(103 days from discovery to filing)
- Compliance flags
- ME AG >90d · 103dME resident >60d · 105d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 8, 2024→ Filed with AG: Feb 19, 2025103d 90 days ME AG >90d Maine Discovered: Nov 8, 2024→ Notified: Feb 21, 2025105d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.