HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
San Fransisco 49ers
bd_6cfc0747bddbb130 · schema v1 · pii pii-v1
Full breach record for San Fransisco 49ers →San Francisco 49ers notified NH AG of unauthorized access to corporate IT network files between Feb 6-11, 2022. Incident involved names and SSN/driver's license data for 15 NH residents. Discovered Aug 9, 2022. Notifications mailed Sept 1, 2022. Response included forensic engagement, law enforcement notification, and credit monitoring offers.
Leak gap clock✗ Leak >180d23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed15 affectedView incident
A leak claim by blackbyte about this victim predates this filing by 201 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/san-francisco-49ers-20220901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2022
- Raw hash
- b106e0c9154a36d6f6dba51764580f129d4a8d7986efd676b7b3824dea473eb4
Reporting entity
- Name
- San Fransisco 49ersnorm: san fransisco 49ers
Victim entity
- Name
- San Fransisco 49ersnorm: san fransisco 49ers
Incident
- Discovered
- Aug 9, 2022
- Materiality determined
- —
- Notification sent
- Sep 1, 2022
- Affected individuals
- 15
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.