HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Brightstar Lottery
bd_4d48839b8ce06ff9 · schema v1 · pii pii-v1
Full breach record for Brightstar Lottery →Brightstar Lottery Group and IGT Group discovered unauthorized access to internal corporate systems on November 17, 2024. The incident involved personal information including names, contact info, dates of birth, government IDs (SSN, driver's license), financial account info, and health data. A manual data review was completed on August 21, 2025. The company engaged Kroll for 24 months of identity monitoring and reported the incident to law enforcement.
California clockDiscovered Nov 17, 2024 → Notified Aug 21, 2025277d ✗ CA 60-day late46 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-612203
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2025
- Raw hash
- b9f9e3b7b4d05f1606aae4b6663d8c9c5626f0f27e8df13dd28e92235c546d49
Reporting entity
- Name
- BRIGHTSTAR GLOBAL SOLUTIONS CORPORATIONnorm: brightstar global
Victim entity
- Name
- Brightstar Lotterynorm: brightstar lottery
- Domain
- brightstarlottery.com
Incident
- Discovered
- Nov 17, 2024
- Materiality determined
- —
- Notification sent
- Aug 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 46 weeks(320 days from discovery to filing)
- Compliance flags
- CA 60-day late · 277d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 17, 2024→ Notified: Aug 21, 2025277d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.