HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
VARSITY BRANDS, INC.
bd_1676b54b0c515384 · schema v1 · pii pii-v1
Full breach record for VARSITY BRANDS, INC. →Varsity Brands, LLC reported a data breach discovered on May 24, 2024, where an unauthorized third party accessed company files containing personal information. The company took systems offline, engaged external cybersecurity experts, notified law enforcement, rotated credentials, and offered complimentary TransUnion credit monitoring to affected individuals.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_3601cb56d70fe719Washington State AGfiled 2024-10-14Candidate
- bd_5ed805070d8eaed7Maine State AGfiled 2024-10-14Verified
- bd_798edfde7bf49675Vermont State AGfiled 2024-10-14Verified
- bd_97714593a5bb482fIndiana State AGfiled 2024-10-14Verified
Show 2 more filings ↓Show fewer ↑
- bd_bca70a851713f822Montana State AGfiled 2024-10-14Verified
- bd_cd6bb99fcd32408aCalifornia State AGfiled 2024-10-14Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/varsity-brands-20241014.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 14, 2024
- Raw hash
- 577de4f8cf320e567f9c4f48673a7950cd6ab9e9866f74794c8326245de2b28f
Reporting entity
- Name
- VARSITY BRANDS, INC.norm: varsity brands
Victim entity
- Name
- VARSITY BRANDS, INC.norm: varsity brands
Incident
- Discovered
- May 24, 2024
- Materiality determined
- —
- Notification sent
- Oct 14, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.