DisclosureLens
MalwareCapture App DataMalware OtherSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountFinancial credentialsLowContained

Penn, LLC

bd_a7ce0a9eecbd10eb · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2022

Filed

Mar 15, 2022

To disclose

28 days

Affected

127scope not determined

Linked

3 filings

Confidence

50%
Full breach record for Penn, LLC6 incidents on file

PulseTV, a subsidiary of Penn LLC, reported a data breach that affected its customers. The breach was caused by a malware attack on a webserver hosted and maintained by Freestyle Solutions, a third-party vendor that hosts PulseTV's website. The malware captured customers' payment card data between November 2019 and February 2022. This notification is a supplement to previous notices, adding 127 Maine residents to the list of those affected.

Maine clockDiscovered Feb 15, 2022Filed with AG Mar 15, 202228d ME AG ≤30d28 days discovery → filing
unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 837 days
discovery → filing · 28 days

Nov 1, 2019

Begins

Feb 15, 2022

Discovered

Mar 15, 2022

Filed

This filing is one of 3 about the same incident.View merged incident
Part of FreeStyle Solutions supply-chain incident (2022) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Delaware State AGMar 15 · first
Maine State AGMar 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.