AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICPIILowContained
Front Rush, LLC
bd_09111982c3df17bb · schema v1 · pii pii-v1
Full breach record for Front Rush, LLC →Front Rush, LLC disclosed a data breach involving a publicly accessible Amazon Web Services S3 bucket. The bucket was accessible from January 18, 2016, to January 8, 2020. The data included names and attachments (transcripts, injury reports) from student-athletes and their families. No evidence of misuse was found. Front Rush secured the bucket, engaged forensic investigators, and offered credit monitoring via TransUnion.
California clockDiscovered Jan 5, 2020 → Notified Jun 15, 2020162d ✗ CA 60-day late29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2e6b95638e8361dcOregon State AGfiled 2020-07-28Candidate
- bd_54b5fe5337da06f2Washington State AGfiled 2020-07-28Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192488
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2020
- Raw hash
- 5a48f266d9567125e6363a99fe1326f090fabb5dfa835f8de9b147a1dacdcaf6
Reporting entity
- Name
- Front Rush, LLCnorm: front rush
Victim entity
- Name
- Front Rush, LLCnorm: front rush
Incident
- Discovered
- Jan 5, 2020
- Materiality determined
- —
- Notification sent
- Jun 15, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- Notifying state regulatory authorities, where required
Compliance
- Time to disclose
- 29 weeks(205 days from discovery to filing)
- Compliance flags
- CA 60-day late · 162d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 5, 2020→ Notified: Jun 15, 2020162d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.