Amateur Athletic Union
bd_a145c79fea7b2b15 · schema v1 · pii pii-v1
Full breach record for Amateur Athletic Union →The Amateur Athletic Union (AAU) notified the Washington Attorney General of a cybersecurity incident affecting 12,200 Washington residents. Malicious code on the AAU checkout page captured payment card information (name, address, card number, expiration, CVV) between October 1, 2018, and July 2, 2019. The code was discovered on August 2, 2019, and removed. AAU engaged forensic investigators and implemented enhanced security measures.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 1, 2018
Begins
Aug 2, 2019
Discovered
Sep 13, 2019
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Delaware State AGbd_188946594fb109282019-09-13Verified
- Hawaii State AGbd_6abca2ac98691b142019-09-13Verified
- Oregon State AGbd_7dfeedd60232f38e2019-09-13Candidate
- Montana State AGbd_b07fe0428d117bac2019-09-13Verified by operator
Show 4 more filings ↓Show fewer ↑up to 4d gap
- Massachusetts State AGbd_d59377d0feb320c02019-09-13Verified
- California State AGbd_ef8c672acb9b8d2d2019-09-13Verified
- New Hampshire State AGbd_0fc905e5def94bb72019-09-17 · +4dVerified
- South Carolina State AGbd_6d9e5de3b9f26d6b2019-09-17 · +4dVerified
Filing propagation · 9 filings · 9 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.