HackingTechnologyRetail & ConsumerInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

IGT Group and Brightstar Lottery Group

bd_ea25f706ef5cc317 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Nov 17, 2024

Filed

Nov 21, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for IGT Group and Brightstar Lottery Group →

IGT Group and Brightstar Lottery Group experienced unauthorized access to internal corporate systems on November 17, 2024. The incident exposed personal information including names, contact info, DOB, government IDs (SSN, driver's license), financial account data, and health data. The companies reported the incident to law enforcement, resecured systems, and engaged Kroll to provide 24 months of complimentary identity monitoring for affected individuals. The investigation was completed on August 21, 2025, triggering notifications to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 17, 2024

Discovered

Nov 21, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_58f100ba5ed45a412025-10-03 · +49dCandidate

Name: BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION
norm: brightstar global

Name: IGT Group and Brightstar Lottery Group
norm: igt group and brightstar lottery
Industry: TechnologyllmRetail & Consumerllm

Discovered: Nov 17, 2024
Materiality determined: —
Notification sent: Aug 21, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported the incident to law enforcement
Initial access: exploit_public_facing

During the incident: Resecured the impacted systems
Investigate the incident
Report the incident to law enforcement
Completed a detailed manual review of the data
Introduced additional measures to further enhance our security defenses
Secured the services of Kroll to provide identity monitoring at no cost to you for 24 months
Changes made: Introduced additional measures to further enhance our security defenses
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGOct 3 · first

Nebraska State AG+49d · this page

Pattern: first filing Oct 3 (VT), last Nov 21 (NE) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/89b8d8e0-7393-4359-bc3a-3f06211fc498.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2025
Raw hash: 643263c53704ea4dabda798b158b248650ac460599045fc672b2f58d92edd26b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBRIGHTSTAR GLOBAL SOLUTIONS CORPORATION

Victim entityIGT Group and Brightstar Lottery Group

Incidentdiscovered Nov 17, 2024

Stated responseResecured the impacted systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov