PhysicalTelecom & MediaInformationTheftCustomer Data InvolvedPIIIdentity (basic)LowContained

Entercom Communications Corp.

bd_e1c3452e8fe232e4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 18, 2019

Filed

Jul 24, 2020

To disclose

44 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for Entercom Communications Corp. →3 incidents on file

Entercom Communications Corp. notified Montana residents that on September 18, 2019, a backpack containing an external hard drive was stolen from an employee's rental vehicle. The drive contained personal information. Entercom reported the theft to law enforcement, launched an investigation, and is offering 12 months of complimentary identity monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 44 weeks / 310 days

Sep 18, 2019

Begins

Sep 18, 2019

Discovered

Jul 24, 2020

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_170d687d26abe2f82020-07-24Verified
Massachusetts State AGbd_6a616dcb896edd6a2020-07-24Verified
Washington State AGbd_bb953533f08fe9ba2020-07-24Candidate
Massachusetts State AGbd_f44d7a316a0b18972020-07-23 · +1dVerified

Name: Entercom Communications Corp.
norm: entercom communications

Name: Entercom Communications Corp.
norm: entercom communications
Industry: Telecom & Mediallm

Discovered: Sep 18, 2019
Breach occurred: Sep 18, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: provided notice to appropriate regulatory authorities

During the incident: Reported the theft to local law enforcement
Launched an internal investigation
Reviewing our existing policies and procedures
Will implement additional safeguards
Offering you access to twelve (12) months of complimentary identity monitoring services through Kroll
Working with law enforcement
Provided notice to appropriate regulatory authorities
Changes made: Reviewing our existing policies and procedures
Will implement additional safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(310 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 23 · first

Indiana State AG+1d

Massachusetts State AG+1d

Washington State AG+1d

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Entercom-Communications-Corp.-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 24, 2020
Raw hash: 68fb3e788e4198cf2e2952e7487d6b7f1e1ad77abe37486cf988aa7ae1e6b73f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEntercom Communications Corp.

Victim entityEntercom Communications Corp.

Incidentdiscovered Sep 18, 2019

Stated responseReported the theft to local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov