HackingHealthcareRetail & ConsumerHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Health (basic)LowContained

Cooper Aerobics Enterprises, Inc

bd_90b909fc2a821feb · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 3, 2023

Filed

Jan 5, 2024

To disclose

48 weeks

Affected

93state residents only

Linked

4 filings

Confidence

65%

Full breach record for Cooper Aerobics Enterprises, Inc →

Cooper Aerobics Enterprises, Inc. notified individuals of a cybersecurity incident occurring on February 3, 2023, involving unauthorized network access. Personal information, including medical data, was potentially accessed. The company engaged forensic investigators, contained the threat, and offered complimentary credit monitoring and identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 48 weeks / 336 days

Feb 3, 2023

Begins

Feb 3, 2023

Discovered

Jan 5, 2024

Filed

vs. sector median

+35 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_aa0d549017fb36cc2024-01-05Verified
Illinois State AGbd_33d184c08834a4882024-01-01 · +4dVerified
New Hampshire State AGbd_2c6b9a5de73115982024-01-17 · +12dVerified

Name: Cooper Aerobics Enterprises, Inc
norm: cooper aerobics
Domain: cooperaerobics.com

Name: Cooper Aerobics Enterprises, Inc
norm: cooper aerobics
Domain: cooperaerobics.com
Industry: HealthcarellmRetail & Consumerllm

Discovered: Feb 3, 2023
Breach occurred: Feb 3, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 5, 2024
Affected individuals: 93state-resident count only
Data types: PIIIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Contained the threat by disabling all unauthorized access to our network
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Conducted a thorough and detailed manual review of all the data contained on the impacted servers
Changes made: Providing complimentary identity theft protection services
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(336 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Illinois State AGJan 1 · first

California State AG+4d

Montana State AG+4d · this page

New Hampshire State AG+16d

Pattern: first filing Jan 1 (IL), last Jan 17 (NH) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1004.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2024
Raw hash: 14680dd604e4211dd0bb9f1a0907902b7cef416626671673eda488df9a6433fa

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCooper Aerobics Enterprises, Inc

Victim entityCooper Aerobics Enterprises, Inc

Incidentdiscovered Feb 3, 2023

Stated responseContained the threat by disabling all unauthorized access to our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov