HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
VARSITY BRANDS, INC.
bd_5ed805070d8eaed7 · schema v1 · pii pii-v1
Full breach record for VARSITY BRANDS, INC. →On May 24, 2024, Varsity Brands Inc identified unusual activity on its systems. Investigation revealed an unauthorized third party obtained a small subset of company files containing personal information. The breach occurred on May 22, 2024 and was discovered May 24, 2024. 65,669 individuals were affected nationally, including 90 Maine residents. Affected individuals were notified October 14, 2024 and offered 24-month TransUnion credit monitoring.
Maine clockDiscovered May 24, 2024 → Filed with AG Oct 14, 2024143d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_1676b54b0c515384New Hampshire State AGfiled 2024-10-14Verified
- bd_3601cb56d70fe719Washington State AGfiled 2024-10-14Candidate
- bd_798edfde7bf49675Vermont State AGfiled 2024-10-14Verified
- bd_97714593a5bb482fIndiana State AGfiled 2024-10-14Verified
Show 2 more filings ↓Show fewer ↑
- bd_bca70a851713f822Montana State AGfiled 2024-10-14Verified
- bd_cd6bb99fcd32408aCalifornia State AGfiled 2024-10-14Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/09043096-cc0d-444c-9dc0-76df8ddd3734.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 14, 2024
- Raw hash
- c8b06ab7cb77c36382c24866cda81a4daa70e10ea4a986506b096d15405a22e1
Reporting entity
- Name
- VARSITY BRANDS, INC.norm: varsity brands
- Industry
- Other Commercial
Victim entity
- Name
- VARSITY BRANDS, INC.norm: varsity brands
- Industry
- Other Commercial
Incident
- Discovered
- May 24, 2024
- Materiality determined
- —
- Notification sent
- Oct 14, 2024
- Affected individuals
- 90
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- ME AG >90d · 143dME resident >60d · 143d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 24, 2024→ Filed with AG: Oct 14, 2024143d 90 days ME AG >90d Maine Discovered: May 24, 2024→ Notified: Oct 14, 2024143d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.