MalwareOtherRansomwareData ExfiltratedData EncryptedPIIIdentity (basic)LowContained

PLAYHOUSE SQUARE FOUNDATION

bd_571fe0a93d7899d7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 29, 2020

Filed

Dec 11, 2020

To disclose

24 weeks

Affected

2state residents only

Linked

4 filings

Confidence

64%

Full breach record for PLAYHOUSE SQUARE FOUNDATION →

Playhouse Square Foundation notified individuals of a data security incident discovered on June 29, 2020. Unauthorized access occurred between June 22-29, 2020, resulting in data encryption by an unknown actor. Personal information may have been accessed. The organization engaged forensic investigators, secured its environment, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 24 weeks / 165 days

Jun 22, 2020

Begins

Jun 29, 2020

Discovered

Dec 11, 2020

Filed

vs. sector median

+15 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_795f05567ff8cc5d2020-12-17 · +6dVerified by operator
New Hampshire State AGbd_f95c8c312bfd0f422020-12-18 · +7dVerified
Massachusetts State AGbd_25bd0527c26868072020-12-21 · +10dVerified

Name: PLAYHOUSE SQUARE FOUNDATION
norm: playhouse square

Name: PLAYHOUSE SQUARE FOUNDATION
norm: playhouse square
Industry: Otherllm

Discovered: Jun 29, 2020
Breach occurred: Jun 22, 2020 – Jun 29, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 16, 2020
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Took immediate and active steps to secure our environment
Launched an internal investigation with the assistance of a leading independent computer forensics firm
Offering you credit monitoring and identity protection services for 12 months at no cost
Changes made: Deploying an advanced endpoint detection and response tool on our systems that is monitored by an external cybersecurity firm
Implementing additional employee training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(165 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGDec 11 · first · this page

Maine State AG+6d

New Hampshire State AG+7d

Massachusetts State AG+10d

Pattern: first filing Dec 11 (MT), last Dec 21 (MA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/playhSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2020
Raw hash: 13a9a950bbbe5bc0d552a7054954031c8288c42f25e68fd04a6e7e48772a558a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityPLAYHOUSE SQUARE FOUNDATION

Victim entityPLAYHOUSE SQUARE FOUNDATION

Incidentdiscovered Jun 29, 2020

Stated responseTook immediate and active steps to secure our environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov