HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedIdentity (basic)MediumContained

JACOBS ENTERTAINMENT, INC.

bd_b8b13c269b466bba · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 7, 2024

Filed

Feb 3, 2025

To disclose

17 weeks

Affected · nationwide

6,2933 in this filing

Linked

7 records

Confidence

65%

Full breach record for JACOBS ENTERTAINMENT, INC. →

Jacobs Entertainment, Inc. reported an external system breach (hacking) on September 23, 2024, discovered October 7, 2024. Approximately 6,293 individuals were affected, including 3 Maine residents. The incident involved unauthorized access and copying of personal information (names and other identifiers). The company engaged forensic investigators, notified law enforcement, and offered 12 months of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockScope identified Jan 6, 2025 → Filed with AG Feb 3, 202528d ✓ ME AG ≤30d17 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 14 days

discovery → filing · 17 weeks / 119 days

Sep 23, 2024

Begins

Oct 7, 2024

Discovered

Feb 3, 2025

Filed

vs. sector median

+7 wks slower

This filing is one of 7 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_3316cf3bdb1919782024-09-23 · +132dVerified

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_fef823bea859e7202024-11-13 · +82dVerified by operator
Maine State AGbd_9d9ad94fdc4373ea2024-11-11 · +84dVerified
Indiana State AGbd_3115f359c2e6fdcb2024-11-07 · +88dVerified
Montana State AGbd_92109ce8c74f23592024-11-06 · +89dVerified

Show 1 more filing ↓up to 317d gap

Maryland State AGbd_f2ceef4a1a16100d2025-12-17 · +317dVerified by operator

Name: JACOBS ENTERTAINMENT, INC.
norm: jacobs entertainment

Name: JACOBS ENTERTAINMENT, INC.
norm: jacobs entertainment
Industry: Retail & Consumerllm

Discovered: Oct 7, 2024
Scope identified: Jan 6, 2025Maine’s notice clock starts here (10 M.R.S. §1348(1))The letter says: “On January 6, 2025, we determined that the files contained some of your personal information, including your name together with your”
Breach occurred: Sep 23, 2024
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 1, 2025
Affected individuals: 6,293state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: exploit_public_facing

During the incident: Promptly took steps to further secure our system
Notified law enforcement
Engaged a forensic security firm to assist us with an investigation
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(119 days from discovery to filing)
Compliance flags: ME AG ≤30d · 28d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Scope identified: Jan 6, 2025
→ Filed with AG: Feb 3, 2025
28d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Scope identified: Jan 6, 2025 → Filed with AG: Feb 3, 2025	28d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Montana State AGNov 6 · first

Indiana State AG+1d

Maine State AG+5d

Massachusetts State AG+7d

Maine State AG+89d · this page

Maryland State AG+406d

Pattern: first filing Nov 6 (MT), last Dec 17 (MD) — a 406-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/45c8b0e6-29de-4ed8-a73f-2df1d6396055.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2025
Raw hash: 5ad9b1a9f99dd42ad61ee01a7f459eab6883bfba2ddb5ef380a690e8a6bb9024

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityJACOBS ENTERTAINMENT, INC.

Victim entityJACOBS ENTERTAINMENT, INC.

Incidentdiscovered Oct 7, 2024

Stated responsePromptly took steps to further secure our system

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov