HackingPIIIdentity (basic)LowContained

Legends International, LLC

bd_0941589fada9d113 · schema v1 · pii pii-v2

Severity

Low

Discovered

Nov 9, 2024

Filed

Apr 15, 2025

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Legends International, LLC notified Nebraska AG that unauthorized activity on its IT systems was identified on November 9, 2024. The incident involved unauthorized access to files containing personal information of employees and venue visitors. Legends took systems offline, engaged external experts, and notified law enforcement. Affected individuals are offered 24 months of Experian IdentityWorks monitoring. No evidence of misuse was known at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 9, 2024

Discovered

Apr 15, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_5fe1780a43ad52142025-04-15Verified
New Hampshire State AGbd_6b4fcd3a091c5f6d2025-04-15Verified
Vermont State AGbd_9e98c97eef43aab42025-04-15Candidate
Massachusetts State AGbd_d9e0ffa9b8fbba802025-04-15Verified

Name: Legends International, LLC
norm: legends international
Domain: legendsglobal.com

Name: Legends International, LLC
norm: legends international
Domain: legendsglobal.com

Discovered: Nov 9, 2024
Materiality determined: —
Notification sent: Apr 15, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Law enforcement was also notified
Initial access: exploit_public_facing

During the incident: Took certain of our systems offline as a precaution
An investigation was launched with assistance from external cybersecurity experts
Law enforcement was also notified
Offering you a complimentary 24-month membership to Experian’s® IdentityWorksSM
Changes made: Took a series of steps to further strengthen our security controls
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGApr 15 · first

New Hampshire State AGApr 15 · first

Vermont State AGApr 15 · first

Massachusetts State AGApr 15 · first

Nebraska State AGApr 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/ad1c5e30-9c3e-4a88-be42-9d84ffde5388.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2025
Raw hash: 13e78e00016cda92bd2809a75b3851d7c6045f5a76e9fc898e3275efbb16a4ea

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLegends International, LLC

Victim entityLegends International, LLC

Incidentdiscovered Nov 9, 2024

Stated responseTook certain of our systems offline as a precaution

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov