HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

JACOBS ENTERTAINMENT, INC.

bd_9d9ad94fdc4373ea · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 7, 2024

Filed

Nov 11, 2024

To disclose

5 weeks

Affected · nationwide

5,6772 in this filing

Linked

6 filings

Confidence

65%

Full breach record for JACOBS ENTERTAINMENT, INC. →2 incidents on file

Jacobs Entertainment, Inc. reported an external system breach (hacking) on September 23, 2024, discovered on October 7, 2024. The incident affected 5,677 individuals, including 2 Maine residents. Personal information exposed included names and Social Security numbers. The company engaged forensic investigators, notified law enforcement, and offered 12 months of Experian IdentityWorks credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 7, 2024 → Filed with AG Nov 11, 202435d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 14 days

discovery → filing · 5 weeks / 35 days

Sep 23, 2024

Begins

Oct 7, 2024

Discovered

Nov 11, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

A leak claim by silentransomgroup about this victim predates this filing by 48 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_3316cf3bdb1919782024-09-23 · +48dVerified

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_fef823bea859e7202024-11-13 · +2dVerified by operator
Indiana State AGbd_3115f359c2e6fdcb2024-11-07 · +4dVerified
Montana State AGbd_92109ce8c74f23592024-11-06 · +5dVerified
Maine State AGbd_b8b13c269b466bba2025-02-03 · +84dVerified

Name: JACOBS ENTERTAINMENT, INC.
norm: jacobs entertainment

Name: JACOBS ENTERTAINMENT, INC.
norm: jacobs entertainment
Industry: Retail & Consumerllm

Discovered: Oct 7, 2024
Breach occurred: Sep 23, 2024
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 8, 2024
Affected individuals: 5,677state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Took steps to further secure our system
Notified law enforcement
Engaged a forensic security firm to assist us with an investigation
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: ME AG >30d · 35dLeak >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 7, 2024
→ Filed with AG: Nov 11, 2024
35d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 7, 2024 → Filed with AG: Nov 11, 2024	35d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Montana State AGNov 6 · first

Indiana State AG+1d

Maine State AG+5d · this page

Massachusetts State AG+7d

Maine State AG+89d

Pattern: first filing Nov 6 (MT), last Feb 3 (ME) — a 89-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/086476e3-83ce-44bb-9386-54576681a48c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 11, 2024
Raw hash: 09da7ae14ced778f40da9e5c4f5c65dd58093fb56b3cca9b304666eb1cf06daa

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityJACOBS ENTERTAINMENT, INC.

Victim entityJACOBS ENTERTAINMENT, INC.

Incidentdiscovered Oct 7, 2024

Stated responseTook steps to further secure our system

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov