HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIFINANCIALIDENTITY_GOVERNMENTMediumContained
Ladies Professional Golf Association, Inc.
bd_ad6f6f4f73700221 · schema v1 · pii pii-v1
Full breach record for Ladies Professional Golf Association, Inc. →An unauthorized actor accessed two LPGA employee email accounts between Aug 19–22, 2024. Discovered Oct 23, 2024, after review of potentially viewed messages confirmed the name, SSN, and financial account number of 2 Maine residents were exposed. Residents notified by mail Nov 22, 2024; one-year Experian IdentityWorks offered. LPGA is enhancing email security.
Maine clockDiscovered Oct 23, 2024 → Filed with AG Nov 25, 202433d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_38b2d60a16959006Indiana State AGfiled 2024-11-22(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/21d3f325-23b8-45d8-b735-ad0c91fc56cb.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 25, 2024
- Raw hash
- 9b41556afb00eb31f8a9c644e03ce6bdfa81016ede6f5706d50a841645e99716
Reporting entity
- Name
- Ladies Professional Golf Association, Inc.norm: ladies professional golf
- Domain
- lpga.com
- Industry
- Non-Profit / Sports Organization
Victim entity
- Name
- Ladies Professional Golf Association, Inc.norm: ladies professional golf
- Domain
- lpga.com
- Industry
- Non-Profit / Sports Organization
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- —
- Notification sent
- Nov 22, 2024
- Affected individuals
- 2
- Data types
- PIIFINANCIALIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notification filed with Maine AG per Me. Rev. Stat. Tit. 10, §1348
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- ME AG >30d · 33d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 23, 2024→ Filed with AG: Nov 25, 202433d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.