DisclosureLens
HackingCustomer Data InvolvedMediumResolved

National Intramural and Recreational Sports Association

bd_e9cc2863b78035b0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 28, 2020

Filed

Oct 23, 2020

To disclose

12 weeks

Affected · nationwide

5,05215 in this filing

Confidence

50%
Full breach record for National Intramural and Recreational Sports Association →2 incidents on file

National Intramural and Recreational Sports Association, a non-profit organization, reported a data breach affecting 5,052 individuals, including 15 Maine residents. The breach, described as an external system breach (hacking), occurred between April 10, 2020, and May 16, 2020. The organization discovered the breach on July 28, 2020, and notified affected consumers in writing on October 23, 2020. No identity theft protection services were offered.

Maine clockDiscovered Jul 28, 2020 → Filed with AG Oct 23, 202087d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 109 days
discovery → filing · 12 weeks / 87 days

Apr 10, 2020

Begins

Jul 28, 2020

Discovered

Oct 23, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,052 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.