HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Ohio Lottery
bd_bd2c8759df7fbb5b · schema v1 · pii pii-v1
Full breach record for Ohio Lottery →The Ohio Lottery detected unauthorized access to its internal office network on December 24, 2023. The incident did not impact the gaming network. Forensic investigation confirmed on April 5, 2024, that personal information, including full names, was exposed. The organization engaged external cybersecurity professionals and is providing 12 months of credit monitoring to affected individuals.
California clockDiscovered Dec 24, 2023 → Notified May 8, 2024136d ✗ CA 60-day late20 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (2)
- bd_2be9a6f3432fb095Leak Sitedragonforcefiled 2023-12-27(133d gap)Verified
- bd_e611336358a91bcaLeak Sitedragonforcefiled 2023-12-21(140d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_6786e9304a70c4daIndiana State AGfiled 2024-05-08(1d gap)Candidate
- bd_890fd36e2b242c06Vermont State AGfiled 2024-05-08(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-585118
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2024
- Raw hash
- 75ee75951a631c856e6fe0cf1196768fb94ca3a4409c4cc4c1e368892a58661a
Reporting entity
- Name
- Ohio Lotterynorm: ohio lottery
- Domain
- ohiolottery.com
Victim entity
- Name
- Ohio Lotterynorm: ohio lottery
- Domain
- ohiolottery.com
Incident
- Discovered
- Dec 24, 2023
- Materiality determined
- —
- Notification sent
- May 8, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(137 days from discovery to filing)
- Compliance flags
- CA 60-day late · 136dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 24, 2023→ Notified: May 8, 2024136d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.