HackingDelayed DiscoveryIDENTITY_BASICLowContained
Detroit Symphony Orchestra
bd_9d8c8188ac713215 · schema v1 · pii pii-v1
Full breach record for Detroit Symphony Orchestra →Detroit Symphony Orchestra notified consumers of a data security incident where an unknown actor accessed the network between Sept 19-27, 2023. The incident involved names. DSO engaged cybersecurity experts, implemented additional security features, and offered 12 months of credit monitoring and identity protection services.
Vermont clock✗ VT AG >45 bday27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by dispossessor about this victim predates this filing by 190 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_919f3f213ee92ff0Montana State AGfiled 2024-04-01Candidate
- bd_adf7430409ccfd8bNew Hampshire State AGfiled 2024-04-01Verified
- bd_b634aa9051f7fd40Indiana State AGfiled 2024-04-01Verified
- bd_f7448b52c6a73761Maine State AGfiled 2024-04-01Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-01-detroit-symphony-orchestra-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2024
- Raw hash
- af77c3fc9b363a685a53668a67e6bd8d5711545fa662b8d6ca4728498381cb9c
Reporting entity
- Name
- Detroit Symphony Orchestranorm: detroit symphony orchestra
- Domain
- dso.org
Victim entity
- Name
- Detroit Symphony Orchestranorm: detroit symphony orchestra
- Domain
- dso.org
Incident
- Discovered
- Sep 27, 2023
- Materiality determined
- Mar 26, 2024
- Notification sent
- Apr 1, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.