HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTPIILowContained
AthleteTrax LLC
bd_568549374640bb19 · schema v1 · pii pii-v1
Full breach record for AthleteTrax LLC →AthleteTrax LLC notified New Hampshire residents of a data breach involving unauthorized access to its sports management application. Between September 25, 2023, and January 19, 2024, an actor installed code to scrape credit card payment data. 16 NH residents were notified on April 26, 2024. The FBI was notified, and the company implemented safeguards.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/athletetrax-20240426.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 26, 2024
- Raw hash
- 4fb03bcd97c4b711346ba35dfa4ad44212e45700de2d1e32d56d12bbbde7b54f
Reporting entity
- Name
- AthleteTrax LLCnorm: athletetrax
Victim entity
- Name
- AthleteTrax LLCnorm: athletetrax
Incident
- Discovered
- Jan 19, 2024
- Materiality determined
- —
- Notification sent
- Apr 26, 2024
- Affected individuals
- 16
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified relevant regulatory authoritiesNotified the Federal Bureau of Investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.