HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
SPRINT LLC
bd_1135a8076a8d3299 · schema v1 · pii pii-v1
Full breach record for SPRINT LLC →Sprint reported unauthorized access to customer accounts via the Samsung.com 'add a line' website. Attackers used valid account credentials to view personal information including names, addresses, phone numbers, and billing details. Sprint secured accounts and reset PINs. No financial data beyond billing addresses was compromised.
California clockDiscovered Jun 22, 2019 → Notified Jun 25, 20193d ✓ CA 60-day OK11 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e456f569def7964fMontana State AGfiled 2019-07-11(8d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-148686
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 3, 2019
- Raw hash
- 2fe1cf4d4ac8c7c8a9ed875b0b5b0006d2fd12defee52e6ceed48d52c831be91
Reporting entity
- Name
- SPRINT LLCnorm: sprint
Victim entity
- Name
- SPRINT LLCnorm: sprint
Incident
- Discovered
- Jun 22, 2019
- Materiality determined
- —
- Notification sent
- Jun 25, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with California Office of the Attorney General
- Third party
- via Samsung
- Initial access
- supply_chain
Compliance
- Time to disclose
- 11 days(11 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 3d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 22, 2019→ Notified: Jun 25, 20193d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.