HackingCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
KEMPER SPORTS MANAGEMENT, INC.
bd_31439c4b32656221 · schema v1 · pii pii-v1
Full breach record for KEMPER SPORTS MANAGEMENT, INC. →On April 1, 2024, Kemper Sports Management, LLC discovered suspicious activity on its computer network. Investigation confirmed an unauthorized actor accessed systems containing name and Social Security number data for current and former employees. Nineteen Maine residents were among the 62,815 total individuals affected. Notification letters were sent on September 9, 2024. Twelve months of credit monitoring via TransUnion/Cyberscout was offered to affected individuals.
Maine clockDiscovered Apr 1, 2024 → Filed with AG Sep 9, 2024161d ✗ ME AG >90d23 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_0c9ffd2ebab2b50dVermont State AGfiled 2024-09-09Verified
- bd_118b7f9dd4b6c144New Hampshire State AGfiled 2024-09-09Verified
- bd_2f5967dc4a369101Indiana State AGfiled 2024-09-09Verified
- bd_5dbe66d152439efaOregon State AGfiled 2024-09-09Verified
Show 3 more filings ↓Show fewer ↑
- bd_7c361bd2e0b92b7fMontana State AGfiled 2024-09-09Verified
- bd_91b7817624b193e2Washington State AGfiled 2024-09-09Verified
- bd_f0f75adbc0018fc8California State AGfiled 2024-09-09Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/93093327-ac65-48f3-bd59-747c0d88bcea.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2024
- Raw hash
- 49645c80027143d04ffd4237d397f9467c7163708c68f2d75728442cd9e4d567
Reporting entity
- Name
- KEMPER SPORTS MANAGEMENT, INC.norm: kemper sports management
- Domain
- kempersports.com
- Industry
- Other Commercial
Victim entity
- Name
- KEMPER SPORTS MANAGEMENT, INC.norm: kemper sports management
- Domain
- kempersports.com
- Industry
- Other Commercial
Incident
- Discovered
- Apr 1, 2024
- Materiality determined
- —
- Notification sent
- Sep 9, 2024
- Affected individuals
- 19
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcementNotified applicable state regulators
Compliance
- Time to disclose
- 23 weeks(161 days from discovery to filing)
- Compliance flags
- ME AG >90d · 161dME resident >60d · 161d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 1, 2024→ Filed with AG: Sep 9, 2024161d 90 days ME AG >90d Maine Discovered: Apr 1, 2024→ Notified: Sep 9, 2024161d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.