HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
National Association for Stock Car Auto Racing
bd_431167985c62e984 · schema v1 · pii pii-v1
Full breach record for National Association for Stock Car Auto Racing →NASCAR reported unauthorized network access between March 31 and April 3, 2025, discovered on April 3, 2025. One New Hampshire resident's name and SSN were compromised. Notification was sent July 24, 2025, offering credit monitoring. Law enforcement and a cybersecurity firm were engaged.
Leak gap clock⏱ Leak >90d16 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by medusa about this victim predates this filing by 112 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-association-stock-car-auto-racing-20250724.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2025
- Raw hash
- 23db8a35436b96449fc8324edcd8893dd24c78048a38d4d641aae78d774e766a
Reporting entity
- Name
- National Association for Stock Car Auto Racingnorm: national association for stock car auto racing
- Domain
- nascar.com
Victim entity
- Name
- National Association for Stock Car Auto Racingnorm: national association for stock car auto racing
- Domain
- nascar.com
Incident
- Discovered
- Apr 3, 2025
- Materiality determined
- Jun 24, 2025
- Notification sent
- Jul 24, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(112 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.