HackingTechnologyInformationStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Entertainment Partners

bd_c6c23a4b86005bd9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 30, 2023

Filed

Aug 11, 2023

To disclose

6 weeks

Affected

281state residents only

Linked

5 filings

Confidence

67%

Full breach record for Entertainment Partners →

Entertainment Partners experienced a security breach on June 30, 2023, resulting in unauthorized access to accounting application data. A sophisticated threat actor accessed database files containing names, addresses, and SSNs/TINs. The company took applications offline, engaged forensic experts, and notified law enforcement. Affected individuals are offered 24 months of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 42 days

Jun 30, 2023

Discovered

Aug 11, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_5a6078b58dfac6d62023-08-11Verified
Hawaii State AGbd_8444a0594fb6ed0b2023-08-11Candidate
California State AGbd_f610f78542b379322023-08-11Verified
South Carolina State AGbd_bcf33a5a28f5681a2023-08-15 · +4dVerified

Name: EP Global Production Solutions, LLC
norm: ep global production solutions

Name: Entertainment Partners
norm: entertainment partners
Industry: Technologyllm

Discovered: Jun 30, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 281state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Took the applications offline
Notified law enforcement
Engaged industry-leading cybersecurity experts to investigate
Restored the applications
Offering a complimentary subscription to an identity monitoring solution through Kroll
Changes made: Continuing to prioritize additional investments in cybersecurity defenses
Continuing to monitor online forums and marketplaces for any information relating to this event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGAug 11 · first

Hawaii State AGAug 11 · first

California State AGAug 11 · first

Montana State AGAug 11 · first · this page

South Carolina State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-550.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2023
Raw hash: 01e5eb0aee0f21d466f57c39243606c58cd9901c25ce244f194941f08828a592

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEP Global Production Solutions, LLC

Victim entityEntertainment Partners

Incidentdiscovered Jun 30, 2023

Stated responseTook the applications offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov