PhysicalOtherTheftCustomer Data InvolvedIdentity (basic)Government IDMediumActive

The 5th Avenue Theatre Association

bd_9464a8ccb4135309 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 30, 2020

Filed

Sep 28, 2020

To disclose

29 days

Affected

4state residents only

Linked

4 filings

Confidence

63%

Full breach record for The 5th Avenue Theatre Association →3 incidents on file

5th Avenue Theatre notified Montana AG of a physical break-in and theft of computer backup tapes on August 30, 2020. The incident may have exposed names, dates of birth, and Social Security numbers. The Theatre engaged law enforcement, legal counsel, and security experts, and offered one year of identity monitoring via Kroll. Investigation into the specific data scope was ongoing at the time of notice.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Aug 30, 2020

Begins

Aug 30, 2020

Discovered

Sep 28, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_68ef7001d40b2f2d2020-09-28Verified
Washington State AGbd_7a0fea3985b8b1862020-09-28Candidate
New Hampshire State AGbd_b92ad020fc05ba372020-09-28Verified

Name: The 5th Avenue Theatre Association
norm: the 5th avenue theatre

Name: The 5th Avenue Theatre Association
norm: the 5th avenue theatre
Industry: Otherllm

Discovered: Aug 30, 2020
Breach occurred: Aug 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2020
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Contacted law enforcement
Retained a specialized legal team
Retained security experts
Secured the services of Kroll to make available identity monitoring services
Changes made: Secured the premises
Offered one year of complimentary identity monitoring services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 28 · first

Washington State AGSep 28 · first

New Hampshire State AGSep 28 · first

Montana State AGSep 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-223.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2020
Raw hash: 3385fcf1687044de9db8645df1ae538e42aa3ccecfc5606dd15a030eb4a68dca

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe 5th Avenue Theatre Association

Victim entityThe 5th Avenue Theatre Association

Incidentdiscovered Aug 30, 2020

Stated responseContacted law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov