HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The Metropolitan Opera Guild, Inc.
bd_c88cdd648a8d499a · schema v1 · pii pii-v1
Full breach record for The Metropolitan Opera Guild, Inc. →The Metropolitan Opera filed a supplemental notice with the New Hampshire AG regarding a data breach. An unknown actor accessed systems between Sept 30 and Dec 6, 2022. Suspicious activity was detected on Dec 6, 2022. The incident involved personal information of 201 NH residents. The Met engaged third-party specialists, notified law enforcement, and offered 12 months of credit monitoring.
Leak gap clock⏱ Leak >30d25 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed201 affectedView incident
A leak claim by snatch about this victim predates this filing by 90 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/metropolitan-opera-house-20230531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 31, 2023
- Raw hash
- 25a14f654e395401b267b7c92ee9afd89bf56f6f66cc1876057bab1410c01ec6
Reporting entity
- Name
- The Metropolitan Opera Guild, Inc.norm: the metropolitan opera guild
Victim entity
- Name
- The Metropolitan Opera Guild, Inc.norm: the metropolitan opera guild
Incident
- Discovered
- Dec 6, 2022
- Materiality determined
- —
- Notification sent
- May 4, 2023
- Affected individuals
- 201
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement regarding the eventProviding written notice of this incident to relevant state regulators
Compliance
- Time to disclose
- 25 weeks(176 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.