HackingData ExfiltratedIDENTITY_BASICPIILowContained
Crystal Bay Casino
bd_09d311cad9d34b3b · schema v1 · pii pii-v1
Full breach record for Crystal Bay Casino →Crystal Bay Casino notified consumers of a November 2022 incident where files were copied from its systems. The breach potentially exposed names and other personal information. The casino reported the incident to the FBI and is offering complimentary credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_537251f71a609215Oregon State AGfiled 2023-02-24Candidate
- bd_743f2080c8c7d3a0Montana State AGfiled 2023-02-24Verified
- bd_d1f04738c35f60ceMaine State AGfiled 2023-02-24Verified
- bd_fb79e1791bba8063California State AGfiled 2023-02-24Verified
Show 4 more filings ↓Show fewer ↑up to 38d gap
- bd_fdeb40f7cd1fe562Washington State AGfiled 2023-02-24Verified
- bd_626acf628d698127California State AGfiled 2023-03-29(33d gap)Verified
- bd_945f609227dd9a05Maine State AGfiled 2023-03-29(33d gap)Verified
- bd_c63b5c4ded012f30New Hampshire State AGfiled 2023-04-03(38d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-24-crystal-bay-casino-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2023
- Raw hash
- a3e98e0b2d3bbb7ef518dea35d7e11475c844a3ddbe126e4334ab8b840be67ce
Reporting entity
- Name
- Crystal Bay Casinonorm: crystal bay casino
Victim entity
- Name
- Crystal Bay Casinonorm: crystal bay casino
Incident
- Discovered
- Nov 1, 2022
- Materiality determined
- Feb 24, 2023
- Notification sent
- Feb 24, 2023
- Affected individuals
- 40
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Vermont Attorney General
Compliance
- Time to disclose
- 16 weeks(115 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.