MalwareCapture App DataMalware OtherSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Penn, LLC
bd_a7ce0a9eecbd10eb · schema v1 · pii pii-v1
Full breach record for Penn, LLC →PulseTV, a subsidiary of Penn LLC, reported a data breach that affected its customers. The breach was caused by a malware attack on a webserver hosted and maintained by Freestyle Solutions, a third-party vendor that hosts PulseTV's website. The malware captured customers' payment card data between November 2019 and February 2022. This notification is a supplement to previous notices, adding 127 Maine residents to the list of those affected.
Maine clockDiscovered Feb 15, 2022 → Filed with AG Mar 15, 202228d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5ae0a6102d57b514Delaware State AGfiled 2022-03-15Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/876ea25b-c72e-4e23-b5b0-bfbd71a578c5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2022
- Raw hash
- d47ff70f11eafc265fd643a9c623ce9de597fcf197a265a23b11c50f18dcd2ee
Reporting entity
- Name
- Penn, LLCnorm: penn
Victim entity
- Name
- Penn, LLCnorm: penn
Incident
- Discovered
- Feb 15, 2022
- Materiality determined
- —
- Notification sent
- Mar 15, 2022
- Affected individuals
- 127
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 15, 2022→ Filed with AG: Mar 15, 202228d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.