HackingTelecom & MediaInformationStolen CredentialsCustomer Data InvolvedCredentialsIdentity (basic)LowContained

Scripps Networks, LLC

bd_ec4189cdd1595b4a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 16, 2015

To disclose

—

Affected

Not disclosed

Confidence

65%

Scripps Networks, LLC (Food.com) experienced an unauthorized intrusion between August 8 and September 2, 2015. The incident resulted in the potential acquisition of user emails/usernames and passwords for Food.com accounts, which also grant access to Foodnetwork.com and related apps. Some users' dates of birth may have been acquired. No financial or government ID data was stored or accessed. The company engaged forensic investigators and recommended password changes.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 8, 2015

Begins

Oct 16, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Scripps Networks, LLC
norm: scripps networks

Name: Scripps Networks, LLC
norm: scripps networks
Domain: food.com
Industry: Telecom & Mediallm

Discovered: —
Breach occurred: Aug 8, 2015 – Sep 2, 2015
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: CredentialsIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged an experienced cybersecurity forensic investigator to assist with the investigation
Recommended that users change the password to their Food.com account
Recommended that users change their password for any other website or system where they use the same or a similar email/username and password combination
Changes made: Taken steps to ensure that this type of intrusion does not happen again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-58311
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2015
Raw hash: 934140a8438d4e67b1f2f09c2d0dccc936a2ea87c6f5f3bb020100ac4be8bdb4

Reporting entityScripps Networks, LLC

Victim entityScripps Networks, LLC

IncidentUnauthorized Access

Stated responseEngaged an experienced cybersecurity forensic investigator to assist with the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov