HackingOtherStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Concord Music Group, Inc.

bd_68ea09aefb784b07 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 2, 2024

To disclose

—

Affected

7state residents only

Linked

7 filings

Confidence

67%

Full breach record for Concord Music Group, Inc. →

Concord Music Group, Inc. notified the New Hampshire Attorney General on February 1, 2024, of a data security event affecting 7 New Hampshire residents. The incident involved unauthorized access to personal information, prompting the company to notify federal law enforcement, implement additional safeguards, and offer credit monitoring services through Experian.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 2, 2024

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_07178af14957ee062024-02-01 · +1dVerified
Montana State AGbd_1c26988bb2f82c9f2024-02-01 · +1dCandidate
Massachusetts State AGbd_99caead1f792fcfe2024-02-01 · +1dVerified
Maine State AGbd_a4d5f3da54432dad2024-02-01 · +1dVerified by operator

Show 2 more filings ↓up to 25d gap

Indiana State AGbd_cb09de5f174482152024-02-01 · +1dVerified
California State AGbd_0e67b89ced80011a2024-02-27 · +25dVerified

Name: Concord Music Group, Inc.
norm: concord music

Name: Concord Music Group, Inc.
norm: concord music
Industry: Otherllm

Discovered: —
Materiality determined: —
Notification sent: Feb 1, 2024
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement regarding the event
Initial access: valid_credentials

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of Concord systems
Identified potentially affected individuals
Notified federal law enforcement regarding the event
Implemented additional safeguards and training to its employees
Providing access to credit monitoring services for individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators, as necessary, and to the three major credit reporting agencies
Changes made: Implemented additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

California State AGFeb 1 · first

Montana State AGFeb 1 · first

Massachusetts State AGFeb 1 · first

Maine State AGFeb 1 · first

Indiana State AGFeb 1 · first

New Hampshire State AG+1d · this page

California State AG+26d

Pattern: first filing Feb 1 (CA), last Feb 27 (CA) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/concord-music-group-20240201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2024
Raw hash: d3a6db499b572832d872e28c36c9c70fae25bc70bc62c1a6f80d421bb98bf3f6

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityConcord Music Group, Inc.

Victim entityConcord Music Group, Inc.

IncidentUnauthorized Access

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov