MisuseProfessional ServicesProfessional ServicesData MishandlingEmployee Data InvolvedTargetedPIIEmploymentLowContained

AEG PRESENTS LLC

bd_687a2e369b709107 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 18, 2024

Filed

Jun 26, 2024

To disclose

8 days

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for AEG PRESENTS LLC →

AEG Presents, LLC reported to NH AG that a former employee emailed company files containing confidential info and other employees' PII to a personal account between Sept 2021 and May 2024. Discovered June 18, 2024. Forensics found no evidence of further misuse. 2 NH residents affected. Company disabled system features, reviewed access controls, and offered 2 years of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 995 days

discovery → filing · 8 days

Sep 27, 2021

Begins

Jun 18, 2024

Discovered

Jun 26, 2024

Filed

vs. sector median

18 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_3984093d1b6acc7a2024-06-26Candidate
Massachusetts State AGbd_578d71746f4ce50f2024-06-26Verified
Indiana State AGbd_6dc132d01464f11c2024-06-26Verified
California State AGbd_11b144f870cb904e2024-06-25 · +1dVerified

Name: AEG PRESENTS LLC
norm: aeg presents

Name: AEG PRESENTS LLC
norm: aeg presents
Industry: Professional Servicesllm

Discovered: Jun 18, 2024
Breach occurred: Sep 27, 2021 – May 3, 2024
Undetected for: 995 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 26, 2024
Affected individuals: 2state-resident count only
Data types: PIIEmployment
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: Internal
Regulator citations: Reported to the NH Department of Justice Office of the Attorney General
Initial access: insider_action

During the incident: Worked with forensic experts to identify and contain the data
Took steps to disable certain features of our system to further restrict access
Commenced a review on our access control policies and procedures to certain applications
Scanning the dark web for any indications that the data has been subject to unauthorized access
Changes made: Review on our access control policies and procedures to certain applications
Secured the services of IDX, A ZeroFox Company, to provide identity monitoring at no cost to you for two years
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJun 25 · first

Maine State AG+1d

Massachusetts State AG+1d

Indiana State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aeg-presents-20240626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2024
Raw hash: a940f78229b801e2de86f0cd8c425983094afd2f56f3ea50d10e2ab13c0c937b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAEG PRESENTS LLC

Victim entityAEG PRESENTS LLC

Incidentdiscovered Jun 18, 2024

Stated responseWorked with forensic experts to identify and contain the data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov