HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Ohio Lottery
bd_8871114eb5c42899 · schema v1 · pii pii-v1
Full breach record for Ohio Lottery →The Ohio Lottery experienced an external system breach (hacking) on December 24, 2023, which was discovered on April 5, 2024. The breach affected 538,959 individuals in total, including 56 residents of Maine. The compromised information includes names and Social Security Numbers. In response, the Ohio Lottery began notifying affected individuals on May 8, 2024, and offered 12 months of credit monitoring and identity theft protection services through IDX/ZEROFOX.
Maine clockDiscovered Apr 5, 2024 → Filed with AG May 9, 202434d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_e67f4bdec39c83ecMontana State AGfiled 2024-05-09Verified
- bd_0f3e71972d4e9714New Hampshire State AGfiled 2024-05-13(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a5f4c06a-d1f1-4e3c-9557-4ca73dce10f8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2024
- Raw hash
- 6a5cbedcf643b48089823f9ad0216b7bbed6d631c993c6489194854a5cc3d688
Reporting entity
- Name
- Ohio Lotterynorm: ohio lottery
- Domain
- ohiolottery.com
Victim entity
- Name
- Ohio Lotterynorm: ohio lottery
- Domain
- ohiolottery.com
Incident
- Discovered
- Apr 5, 2024
- Materiality determined
- —
- Notification sent
- May 8, 2024
- Affected individuals
- 56
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 5, 2024→ Filed with AG: May 9, 202434d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.