PhysicalTelecom & MediaInformationTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumActive

The 5th Avenue Theatre Association

bd_b92ad020fc05ba37 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 30, 2020

Filed

Sep 28, 2020

To disclose

29 days

Affected

5state residents only

Linked

4 filings

Confidence

66%

Full breach record for The 5th Avenue Theatre Association →3 incidents on file

The 5th Avenue Theatre Association suffered a break-in and theft of computer equipment, including backup tapes, on August 30, 2020. The stolen data may have included names, dates of birth, and Social Security numbers of employees and patrons. Five New Hampshire residents were affected. The organization contacted law enforcement, retained legal and security experts, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Aug 30, 2020

Begins

Aug 30, 2020

Discovered

Sep 28, 2020

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_68ef7001d40b2f2d2020-09-28Verified
Washington State AGbd_7a0fea3985b8b1862020-09-28Candidate
Montana State AGbd_9464a8ccb41353092020-09-28Verified

Name: The 5th Avenue Theatre Association
norm: the 5th avenue theatre
Domain: grsm.com

Name: The 5th Avenue Theatre Association
norm: the 5th avenue theatre
Industry: Telecom & Mediallm

Discovered: Aug 30, 2020
Breach occurred: Aug 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2020
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Contacted law enforcement
Retained a specialized legal team and security experts
Provided notification of the incident to potentially impacted individuals
Offered twelve months of one-bureau credit monitoring services
Changes made: Continuing to work internally and with leading security experts concerning physical and electronic data security to undertake appropriate precautionary measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 28 · first

Washington State AGSep 28 · first

Montana State AGSep 28 · first

New Hampshire State AGSep 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/5th-avenue-theatre-20200928.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2020
Raw hash: 541c5d6423f97ed694770de67d60a9d89e86cde288c4a085e3c4c4227e498580

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe 5th Avenue Theatre Association

Victim entityThe 5th Avenue Theatre Association

Incidentdiscovered Aug 30, 2020

Stated responseContacted law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov