HackingDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Concord Music Group, Inc.
bd_a4d5f3da54432dad · schema v1 · pii pii-v1
Full breach record for Concord Music Group, Inc. →Concord Music Group, Inc. experienced an external system breach between November 14, 2022, and November 18, 2022, which was discovered on October 12, 2023. The breach affected 3,131 individuals, compromising their names and Social Security numbers. The company notified the affected individuals on February 1, 2024, and offered identity theft protection services.
Maine clockDiscovered Oct 12, 2023 → Filed with AG Feb 1, 2024112d ✗ ME AG >90d16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_07178af14957ee06California State AGfiled 2024-02-01Verified
- bd_1c26988bb2f82c9fMontana State AGfiled 2024-02-01Candidate
- bd_cb09de5f17448215Indiana State AGfiled 2024-02-01Verified
- bd_68ea09aefb784b07New Hampshire State AGfiled 2024-02-02(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 26d gap
- bd_0e67b89ced80011aCalifornia State AGfiled 2024-02-27(26d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f89b1165-bd64-451a-bb19-82788fde9f96.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 1, 2024
- Raw hash
- ef78897b2abbdfadbc321ad83571123e14d345c5daeeb4ab0c4d7d8fdb9a30a0
Reporting entity
- Name
- Concord Music Group, Inc.norm: concord music
Victim entity
- Name
- Concord Music Group, Inc.norm: concord music
Incident
- Discovered
- Oct 12, 2023
- Materiality determined
- —
- Notification sent
- Feb 1, 2024
- Affected individuals
- 3,131
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 16 weeks(112 days from discovery to filing)
- Compliance flags
- ME AG >90d · 112dME resident >60d · 112d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 12, 2023→ Filed with AG: Feb 1, 2024112d 90 days ME AG >90d Maine Discovered: Oct 12, 2023→ Notified: Feb 1, 2024112d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.