HackingTelecom & MediaInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Financial accountMediumContained

The Sprint Group

bd_d05d7523f7bca5f9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 22, 2019

Filed

Jul 9, 2019

To disclose

17 days

Affected · nationwide

26,801596 in this filing

Confidence

66%

Full breach record for The Sprint Group →

Sprint Corporation notified Washington AG of unauthorized access to customer accounts via Samsung.com 'add a line' site on June 22, 2019. 26,801 customers affected (596 in WA). Data included names, addresses, phone numbers, account numbers, and billing info. Sprint reset PINs and notified customers starting July 11, 2019.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 days

Jun 22, 2019

Discovered

Jul 9, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed26,801 affectedView incident

Name: SPRINT LLC
norm: sprint
Domain: hub-sprint.com

Name: The Sprint Group
norm: the sprint
Domain: thesprintgroup.com
Industry: Telecom & Mediallm

Discovered: Jun 22, 2019
Materiality determined: —
Notification sent: Jul 11, 2019
Affected individuals: 26,801state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General
Initial access: valid_credentials

During the incident: Resetting the affected customer account PIN codes
Re-securing the Sprint accounts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10644.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 9, 2019
Raw hash: 378157f930030a1d36d62f3ee08ef1fec060c095816d1e1426cc2b1b24a84dc4

Reporting entitySPRINT LLC

Victim entityThe Sprint Group

Incidentdiscovered Jun 22, 2019

Stated responseResetting the affected customer account PIN codes

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com