HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Sugar Bowl Corporation
bd_72baf7b6337b9ef1 · schema v1 · pii pii-v1
Full breach record for Sugar Bowl Corporation →Sugar Bowl Corporation, a California-based commercial entity, reported an external system breach (hacking) occurring on October 9, 2020, discovered on October 12, 2020. The incident affected 6,960 individuals total, including 7 Maine residents. The breach compromised names and driver's license numbers. The company provided written notification on December 18, 2020, and offered one year of Equifax credit monitoring services.
Maine clockDiscovered Oct 12, 2020 → Filed with AG Dec 30, 202079d ⏱ ME AG >30d11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d1cf2054aa23b2fbCalifornia State AGfiled 2020-12-30Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c9ddc9d4-d9fd-46bc-9ae4-9df76b06dc0c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2020
- Raw hash
- 35771538ca97ecf4f0a54f5432d4226120202c1e80bc2f5aac3085a23111b34e
Reporting entity
- Name
- Sugar Bowl Corporationnorm: sugar bowl
- Domain
- sugarsteel.com
Victim entity
- Name
- Sugar Bowl Corporationnorm: sugar bowl
- Domain
- sugarsteel.com
Incident
- Discovered
- Oct 12, 2020
- Materiality determined
- —
- Notification sent
- Dec 18, 2020
- Affected individuals
- 6,960
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- ME AG >30d · 79dME resident >60d · 67d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 12, 2020→ Filed with AG: Dec 30, 202079d 30 days (soft) ME AG >30d Maine Discovered: Oct 12, 2020→ Notified: Dec 18, 202067d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.