DisclosureLens
HackingTelecom & MediaInformationVulnerability ExploitCustomer Data InvolvedCredentialsLowContained

The E.W. Scripps Company

bd_a5cd48d7ea023274 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 13, 2022

Filed

Feb 16, 2022

To disclose

5 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%
Full breach record for The E.W. Scripps Company →2 incidents on file

The E. W. Scripps Company notified users of spellingbee.com that an unknown party exploited a vulnerability in a corporate-owned administrative website on Jan. 12, 2022, obtaining usernames and passwords. The company identified the vulnerability on Jan. 13, 2022, fixed it, engaged forensic investigators, notified law enforcement, and disabled affected passwords.

California clockDiscovered Jan 13, 2022 → Notified Feb 15, 202233d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

undetected · 1 days
discovery → filing · 5 weeks / 34 days

Jan 12, 2022

Begins

Jan 13, 2022

Discovered

Feb 16, 2022

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Illinois State AGJan 1 · first
Maine State AG+46d
California State AG+46d · this page

Pattern: first filing Jan 1 (IL), last Feb 16 (CA) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.