HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
New TSI Holdings, Inc./New York Sports Club
bd_2fc1b3f24e8609eb · schema v1 · pii pii-v1
Full breach record for New TSI Holdings, Inc./New York Sports Club →New TSI Holdings, Inc. (New York Sports Club) notified the NH AG of a data breach occurring on July 27, 2024, discovered on August 23, 2024. An unauthorized user accessed server files containing employee SSNs and passport numbers. 151 NH residents affected. Response included password resets, enhanced security, MFA implementation, and identity theft protection offers.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_147073b7a8219df5California State AGfiled 2024-09-26Verified
- bd_315179cbe30948c6Indiana State AGfiled 2024-09-26Verified
- bd_385384a57b9bbeaeMaine State AGfiled 2024-09-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-tsi-holdings-new-york-sports-club-20240926.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2024
- Raw hash
- 7f3d1a6df30b48f198f6227eb4f1fe8548f74f18fdd122bf1c2c55401b34de0b
Reporting entity
- Name
- New TSI Holdings, Inc.norm: new tsi
Victim entity
- Name
- New TSI Holdings, Inc./New York Sports Clubnorm: new tsi holdings inc new york sports club
Incident
- Discovered
- Aug 23, 2024
- Materiality determined
- —
- Notification sent
- Sep 26, 2024
- Affected individuals
- 151
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.