HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Concord Music Group, Inc.
bd_0e67b89ced80011a · schema v1 · pii pii-v1
Full breach record for Concord Music Group, Inc. →Concord Music Group, Inc. notified the California AG of a data security incident where an unknown actor accessed systems between Nov 14-18, 2022. Discovery occurred on Nov 16, 2022. The breach involved names and Social Security numbers. Concord engaged forensic specialists, secured systems, and offered 12 months of credit monitoring. This is a supplemental notice.
California clockDiscovered Nov 16, 2022 → Notified Feb 27, 2024468d ✗ CA 60-day late16 months discovery → filing
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_68ea09aefb784b07New Hampshire State AGfiled 2024-02-02(25d gap)Verified
- bd_07178af14957ee06California State AGfiled 2024-02-01(26d gap)Verified
- bd_1c26988bb2f82c9fMontana State AGfiled 2024-02-01(26d gap)Candidate
- bd_a4d5f3da54432dadMaine State AGfiled 2024-02-01(26d gap)Verified by operator
Show 1 more filing ↓Show fewer ↑up to 26d gap
- bd_cb09de5f17448215Indiana State AGfiled 2024-02-01(26d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-581573
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2024
- Raw hash
- b289f26a4a878e91882b47c819de812b62c714218369bc247184bc6cb777625f
Reporting entity
- Name
- Concord Music Group, Inc.norm: concord music
Victim entity
- Name
- Concord Music Group, Inc.norm: concord music
Incident
- Discovered
- Nov 16, 2022
- Materiality determined
- —
- Notification sent
- Feb 27, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported this incident to federal law enforcement
Compliance
- Time to disclose
- 16 months(468 days from discovery to filing)
- Compliance flags
- CA 60-day late · 468d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 16, 2022→ Notified: Feb 27, 2024468d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.