PhysicalTelecom & MediaInformationTheftCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Entercom Portland, LLC

bd_5dd308b15a1312fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 8, 2014

To disclose

—

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Entercom Portland, LLC →

Entercom Portland, LLC reported the theft of data cartridges containing backup data from an employee's vehicle on Feb 28, 2014. The theft affected 2 New Hampshire residents, exposing names, SSNs, and DOBs. Entercom notified law enforcement, retained forensic and legal counsel, and offered 1 year of identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 28, 2014

Begins

May 8, 2014

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_5dcc1df6166aa41b2014-05-12 · +4dVerified

Name: Entercom Portland, LLC
norm: entercom portland

Name: Entercom Portland, LLC
norm: entercom portland
Industry: Telecom & Mediallm

Discovered: —
Breach occurred: Feb 28, 2014
Materiality determined: —
Notification sent: May 8, 2014
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Attorney GeneralProvided written notice to other state regulatorsProvided written notice to national consumer reporting agencies

During the incident: Reported the theft to local law enforcement
Commenced an internal investigation to determine what data was stored on the backup cartridges
Retained an independent, third-party security expert to assist with the investigation
Retained privacy and data security legal counsel to assist with the investigation and response
Examined and continues to examine its procedures to reduce the chances of a similar event occurring in the future
Changes made: Examined and continues to examine its procedures to reduce the chances of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 8 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/entercom-portland-20140508.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 8, 2014
Raw hash: a2cd763705077be225e54ad8ad21e6f09385c9b350193ff07f4ed331d58855e8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEntercom Portland, LLC

Victim entityEntercom Portland, LLC

IncidentUnknown

Stated responseReported the theft to local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov