DisclosureLens
HackingCustomer Data InvolvedFinancial accountFinancial credentialsMediumResolved

The Metropolitan Opera Guild, Inc.

bd_1714f3733587599d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 21, 2023

Filed

May 3, 2023

To disclose

10 weeks

Affected · nationwide

45,094260 in this filing

Linked

11 records

Confidence

50%
Full breach record for The Metropolitan Opera Guild, Inc. →3 incidents on file

The Metropolitan Opera reported a data breach to the Maine Attorney General, indicating that an external system breach occurred between September 30, 2022, and December 6, 2022. The breach was discovered on February 21, 2023. The incident affected 260 Maine residents, and the compromised information included names in combination with financial account or credit/debit card numbers and their security codes. The organization began notifying affected individuals on May 3, 2023, and offered 12 months of identity restoration and credit monitoring services through Kroll.

Maine clockDiscovered Feb 21, 2023 → Filed with AG May 3, 202371d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 144 days
discovery → filing · 10 weeks / 71 days

Sep 30, 2022

Begins

Feb 21, 2023

Discovered

May 3, 2023

Filed

This filing is one of 11 records about the same incident.View merged incident
A leak claim by snatch about this victim was first seen 62 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 28d gap

Filing propagation · 10 filings · 8 states

View merged incident ↗
Indiana State AGMay 3 · first
Montana State AGMay 3 · first
Oregon State AGMay 3 · first
California State AGMay 3 · first
Massachusetts State AGMay 3 · first
Vermont State AGMay 3 · first
Maine State AGMay 3 · first · this page
Maine State AG+19d
California State AG+19d
New Hampshire State AG+28d

Pattern: first filing May 3 (IN), last May 31 (NH) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.