HackingOtherCustomer Data InvolvedIdentity (basic)LowContained

The Chicago Zoological Society

bd_834f48c99478c31a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 16, 2024

Filed

Jul 19, 2024

To disclose

26 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for The Chicago Zoological Society →

Chicago Zoological Society d/b/a Brookfield Zoo Chicago notified New Hampshire residents of unauthorized access to its systems on January 16, 2024. An unknown individual accessed and potentially copied files containing names and other personal information. The zoo secured its network, engaged third-party cyber specialists, and notified law enforcement. Three New Hampshire residents were affected. Complimentary credit monitoring and identity restoration services are being offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d26 weeks discovery → filing

Incident timeline

discovery → filing · 26 weeks / 185 days

Jan 16, 2024

Begins

Jan 16, 2024

Discovered

Jul 19, 2024

Filed

vs. sector median

+18 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by hunters_international about this victim predates this filing by 152 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitehunters_internationalbd_e2f2d29e69a847052024-02-17 · +153dVerified by operator

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_33ed2ecc8aac322c2024-07-19Verified
Montana State AGbd_bbdec5fec2d533dc2024-07-19Verified
Indiana State AGbd_f9aba21f4f5210212024-07-19Verified
Illinois State AGbd_6906df9b2b9d94502024-07-01 · +18dCandidate

Name: The Chicago Zoological Society
norm: the chicago zoological society
Domain: czs.org

Name: The Chicago Zoological Society
norm: the chicago zoological society
Domain: czs.org
Also named: Chicago Zoological Societydba oflegal entity
Brookfield Zoo Chicagodba oftrade name
Industry: Otherllm

Discovered: Jan 16, 2024
Breach occurred: Jan 16, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 19, 2024
Affected individuals: 3state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified local and federal law enforcementProviding written notice of this event to relevant state regulators

During the incident: Took steps necessary to secure our network
Launched an investigation into the nature and the scope of the event with the assistance of third-party cyber specialists
Notified local and federal law enforcement regarding the event
Providing access to credit monitoring services for 24 months through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing written notice of this event to relevant state regulators
Providing written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Evaluating additional technical security measures
Evaluating existing policies and procedures to mitigate reoccurrence of this type of event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(185 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJul 1 · first

Massachusetts State AG+18d

Montana State AG+18d

Indiana State AG+18d

New Hampshire State AG+18d · this page

Pattern: first filing Jul 1 (IL), last Jul 19 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chicago-zoological-society-brookfield-zoo-20240719.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 19, 2024
Raw hash: 7675588c4908b88402541961e43a69986513750a5981cc8192e69506f51b554f

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Chicago Zoological Society

Victim entityThe Chicago Zoological Society

Incidentdiscovered Jan 16, 2024

Stated responseTook steps necessary to secure our network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov