DisclosureLens
HackingTechnologyRetail & ConsumerInformationHacking OtherCustomer Data InvolvedIdentity (basic)Government IDHighContained

SONY INTERACTIVE ENTERTAINMENT LLC

bd_9166ebc934535cb1 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 2, 2023

Filed

Oct 3, 2023

To disclose

18 weeks

Affected · nationwide

6,7914 in this filing

Linked

6 filings

Confidence

50%
Full breach record for SONY INTERACTIVE ENTERTAINMENT LLC →

Sony Interactive Entertainment LLC reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between May 28, 2023, and May 30, 2023. The breach was discovered on June 2, 2023. The incident affected 4 Maine residents and a total of 6,791 individuals. The compromised information includes names and Social Security Numbers. Affected individuals were notified electronically on October 3, 2023, and were offered 24 months of credit monitoring and identity restoration services through Equifax.

Maine clockDiscovered Jun 2, 2023 → Filed with AG Oct 3, 2023123d ✗ ME AG >90d18 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days
discovery → filing · 18 weeks / 123 days

May 28, 2023

Begins

Jun 2, 2023

Discovered

Oct 3, 2023

Filed

vs. sector median

+5 wks slower

This filing is one of 6 filings about the same incident.View merged incident
Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓

Filing propagation · 6 filings · 6 states

View merged incident ↗
Indiana State AGOct 3 · first
New Hampshire State AGOct 3 · first
Massachusetts State AGOct 3 · first
Vermont State AGOct 3 · first
California State AGOct 3 · first
Maine State AGOct 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.