Concord Music Group, Inc.
bd_07178af14957ee06 · schema v1 · pii pii-v1
Full breach record for Concord Music Group, Inc. →Concord Music Group, Inc. notified the California Attorney General of a data security incident. An unknown external actor gained unauthorized access to Concord's network between November 14 and November 18, 2022. Concord discovered suspicious activity on November 16, 2022. The actor acquired files containing personal information, including names. Concord engaged third-party forensic specialists and a data review vendor. The investigation confirmed the data was accessed and acquired. Concord reported the incident to federal law enforcement and implemented additional security measures. Affected individuals are offered credit monitoring and identity protection services through Experian.
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1c26988bb2f82c9fMontana State AGfiled 2024-02-01Candidate
- bd_a4d5f3da54432dadMaine State AGfiled 2024-02-01Verified by operator
- bd_cb09de5f17448215Indiana State AGfiled 2024-02-01Verified
- bd_68ea09aefb784b07New Hampshire State AGfiled 2024-02-02(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 26d gap
- bd_0e67b89ced80011aCalifornia State AGfiled 2024-02-27(26d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-580343
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 1, 2024
- Raw hash
- 47a591fa9b4bc5c8552c8ae821790f2ee83515feaf9d4eb15d6e53e8a7462456
Reporting entity
- Name
- Concord Music Group, Inc.norm: concord music
Victim entity
- Name
- Concord Music Group, Inc.norm: concord music
Incident
- Discovered
- Nov 16, 2022
- Materiality determined
- —
- Notification sent
- Feb 1, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported this incident to federal law enforcement
Compliance
- Time to disclose
- 15 months(442 days from discovery to filing)
- Compliance flags
- CA 60-day late · 442d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 16, 2022→ Notified: Feb 1, 2024442d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.