HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Crystal Bay Casino
bd_c63b5c4ded012f30 · schema v1 · pii pii-v1
Full breach record for Crystal Bay Casino →Crystal Bay Casino filed a supplemental notice with the New Hampshire Attorney General regarding a data event in November 2022. Unauthorized copying of files and database information occurred around November 27, 2022. The incident affected 128 New Hampshire residents, involving names and dates of birth. The casino reported the incident to the FBI, engaged in forensic investigation, and provided credit monitoring services to affected individuals.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_626acf628d698127California State AGfiled 2023-03-29(5d gap)Verified
- bd_945f609227dd9a05Maine State AGfiled 2023-03-29(5d gap)Verified
- bd_09d311cad9d34b3bVermont State AGfiled 2023-02-24(38d gap)Verified
- bd_537251f71a609215Oregon State AGfiled 2023-02-24(38d gap)Candidate
Show 4 more filings ↓Show fewer ↑up to 38d gap
- bd_743f2080c8c7d3a0Montana State AGfiled 2023-02-24(38d gap)Verified
- bd_d1f04738c35f60ceMaine State AGfiled 2023-02-24(38d gap)Verified
- bd_fb79e1791bba8063California State AGfiled 2023-02-24(38d gap)Verified
- bd_fdeb40f7cd1fe562Washington State AGfiled 2023-02-24(38d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/crystal-bay-casino-20230403.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2023
- Raw hash
- b26dcc89b2e771d65d453f3078a2fb2109c3bd11bb229ad45c8593226aabf43f
Reporting entity
- Name
- Crystal Bay Casinonorm: crystal bay casino
Victim entity
- Name
- Crystal Bay Casinonorm: crystal bay casino
Incident
- Discovered
- Nov 1, 2022
- Materiality determined
- Feb 7, 2023
- Notification sent
- Feb 24, 2023
- Affected individuals
- 128
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Office of the New Hampshire Attorney General
Compliance
- Time to disclose
- 22 weeks(153 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.