HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
SCUF Gaming International, LLC
bd_bb5a520c3878a188 · schema v1 · pii pii-v1
Full breach record for SCUF Gaming International, LLC →SCUF Gaming International, LLC reported an external system breach (hacking) occurring on 02/23/2021 and discovered on 03/16/2021. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs) for 32,645 individuals, including 119 Maine residents. Written notification was sent on 10/21/2021. No identity theft protection services were offered.
Maine clockDiscovered Mar 16, 2021 → Filed with AG Oct 21, 2021219d ✗ ME AG >90d31 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2465f9982711a8fcWashington State AGfiled 2021-10-21Verified by operator
- bd_66893d75999c2fb3California State AGfiled 2021-10-21Verified by operator
- bd_8127be01cc3c5ceeOregon State AGfiled 2021-10-21Verified by operator
- bd_706a74ae76c26945Montana State AGfiled 2021-10-04(17d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2342cdf5-2a11-4123-a100-4fd75096a74a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2021
- Raw hash
- 71a5ed74445235aeda268ccb89f3b070e3520ac5e4d4c6bd939e8cebd8b6bb13
Reporting entity
- Name
- SCUF Gaming International, LLCnorm: scuf gaming
- Domain
- scufgaming.com
Victim entity
- Name
- SCUF Gaming International, LLCnorm: scuf gaming
- Domain
- scufgaming.com
Incident
- Discovered
- Mar 16, 2021
- Materiality determined
- —
- Notification sent
- Oct 21, 2021
- Affected individuals
- 32,645
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 31 weeks(219 days from discovery to filing)
- Compliance flags
- ME AG >90d · 219dME resident >180d · 219d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 16, 2021→ Filed with AG: Oct 21, 2021219d 90 days ME AG >90d Maine Discovered: Mar 16, 2021→ Notified: Oct 21, 2021219d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.