HackingVulnerability ExploitZero-DayCustomer Data InvolvedIdentity (basic)Government IDHighContained

ARISTOCRAT TECHNOLOGIES, INC.

bd_435e1eee74ecf8a3 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 18, 2023

Filed

Sep 20, 2023

To disclose

5 weeks

Affected · nationwide

7,2001 in this filing

Linked

7 filings

Confidence

50%

Full breach record for ARISTOCRAT TECHNOLOGIES, INC. →

Aristocrat Technologies, Inc. experienced a data breach stemming from a zero-day software vulnerability that occurred between May 29, 2023, and May 31, 2023. The breach was discovered on August 18, 2023. The incident affected one Maine resident, compromising their name and Social Security number. In response, the company provided notification to the affected individual on September 21, 2023, and offered 24 months of identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 18, 2023 → Filed with AG Sep 20, 202333d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 81 days

discovery → filing · 5 weeks / 33 days

May 29, 2023

Begins

Aug 18, 2023

Discovered

Sep 20, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_e8c722d5edffc20e2023-07-26 · +56dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_220882196d8d5ed72023-09-20Verified by operator
Montana State AGbd_502db1048f27713a2023-09-20Verified by operator
Washington State AGbd_f6cfde1f457ae0a72023-09-20Verified
New Hampshire State AGbd_52c2b0ce02f743cc2023-09-21 · +1dVerified

Show 1 more filing ↓up to 1d gap

Indiana State AGbd_d625029d02653b4a2023-09-21 · +1dVerified

Name: ARISTOCRAT TECHNOLOGIES, INC.
norm: aristocrat technologies
Domain: aristocrat.com

Name: ARISTOCRAT TECHNOLOGIES, INC.
norm: aristocrat technologies
Domain: aristocrat.com

Discovered: Aug 18, 2023
Breach occurred: May 29, 2023 – May 31, 2023
Undetected for: 81 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 21, 2023
Affected individuals: 7,200state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 24 months of identity theft protection services via Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: ME AG >30d · 33d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 18, 2023
→ Filed with AG: Sep 20, 2023
33d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 18, 2023 → Filed with AG: Sep 20, 2023	33d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGSep 20 · first

Montana State AGSep 20 · first

Washington State AGSep 20 · first

Maine State AGSep 20 · first · this page

New Hampshire State AG+1d

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6116bc57-8c5d-460a-b21e-9b24ee8f534f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 20, 2023
Raw hash: c274d314927f618a656e117028fc6da4b8b14917e590a0980c11e07b4782e39a

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityARISTOCRAT TECHNOLOGIES, INC.

Victim entityARISTOCRAT TECHNOLOGIES, INC.

Incidentdiscovered Aug 18, 2023

Stated responseOffered 24 months of identity theft protection services via Experian IdentityWorks

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov