HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICCREDENTIALSLowContained
Home Box Office, Inc.
bd_3146fe89df84f797 · schema v1 · pii pii-v1
Full breach record for Home Box Office, Inc. →Home Box Office, Inc. (HBO) disclosed a data breach affecting its information technology network. An unauthorized third party illegally accessed HBO's network between May 15, 2017, and July 26, 2017. The incident involved the exfiltration of personally identifiable information (PII). HBO cooperated with law enforcement, implemented enhanced security controls, and provided 12 months of free credit monitoring and identity theft prevention services via AllClear ID to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-103102
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 30, 2017
- Raw hash
- 6e65f7b241d67c55302a1ce2338c4a7378349e856cc4a72783b8d3d294ab3e1c
Reporting entity
- Name
- Home Box Office, Inc.norm: home box office
Victim entity
- Name
- Home Box Office, Inc.norm: home box office
Incident
- Discovered
- Jul 26, 2017
- Materiality determined
- Oct 31, 2017
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(96 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.