HackingOtherCustomer Data InvolvedPIIIdentity (basic)LowContained

Entertainment Community Fund

bd_1ca85b90b2e5dd75 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 26, 2023

Filed

Sep 26, 2023

To disclose

≤1 day

Affected

Not disclosed

Linked

4 filings

Confidence

69%

Full breach record for Entertainment Community Fund →2 incidents on file

Actors Fund Home (dba Entertainment Community Fund) notified consumers of a security incident involving unauthorized access to its network. The organization engaged external forensic investigators and is offering 12 months of credit monitoring. The specific data types and number of affected individuals were not definitively determined at the time of notice.

J jump to incidentP pin to compareR raw source

Vermont clock✓ VT AG ≤14 bday≤1 day discovery → filing

⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

discovery → filing · ≤1 day / 0 days

Sep 26, 2023

Discovered

Sep 26, 2023

Filed

vs. sector median

8 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_5fd2df0f10cc97402023-09-26Verified
Maine State AGbd_cfae9e8d8922965c2023-09-27 · +1dVerified
New Hampshire State AGbd_0c92c20a25f2c3942023-10-02 · +6dVerified

Name: Entertainment Community Fund
norm: entertainment community

Name: Entertainment Community Fund
norm: entertainment community
Also named: Entertainment Community Funddba oflegal entity
Actors Fund Homedba oftrade name
Industry: Otherllm

Discovered: Sep 26, 2023
Materiality determined: —
Notification sent: Sep 26, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation working very closely with external cybersecurity professionals
Offering you access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Implemented additional technical privacy and security safeguards related to the storage and security of personal information
Changes made: Implemented additional technical privacy and security safeguards related to the storage and security of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: VT AG ≤14 bday
Discovery-date grounding: notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRSep 26 · first

Vermont State AGSep 26 · first · this page

Maine State AG+1d

New Hampshire State AG+6d

Pattern: first filing Sep 26 (NJ), last Oct 2 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-09-26-entertainment-community-fund-dba-actors-fund-home-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2023
Raw hash: 67467ac215a12bd50e71240b446d0dbe6fb7e869f9dcd37467fbb20b8e27b327

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityEntertainment Community Fund

Victim entityEntertainment Community Fund

Incidentdiscovered Sep 26, 2023

Stated responseCommenced a prompt and thorough investigation working very closely with external cybersecurity professionals

ComplianceVT AG ≤14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov