HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Entertainment Partners

bd_f610f78542b37932 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 30, 2023

Filed

Aug 11, 2023

To disclose

6 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Entertainment Partners →

Entertainment Partners (reported by EP Global Production Solutions, LLC) detected unauthorized access to accounting application data on June 30, 2023. A sophisticated threat actor evaded defenses and acquired database files containing names, addresses, and SSNs/TINs of individuals involved in prior productions. The files were recovered. No misuse was observed. The company engaged cybersecurity experts, notified law enforcement, and offered 24 months of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 42 days

Jun 30, 2023

Discovered

Aug 11, 2023

Filed

vs. sector median

13 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_5a6078b58dfac6d62023-08-11Verified
Hawaii State AGbd_8444a0594fb6ed0b2023-08-11Candidate
Montana State AGbd_c6c23a4b86005bd92023-08-11Verified
South Carolina State AGbd_bcf33a5a28f5681a2023-08-15 · +4dVerified

Name: EP Global Production Solutions, LLC
norm: ep global production solutions

Name: Entertainment Partners
norm: entertainment partners
Industry: Professional Servicesllm

Discovered: Jun 30, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Took the applications offline
Notified law enforcement
Engaged industry-leading cybersecurity experts to investigate
Offering a complimentary subscription to an identity monitoring solution through Kroll
Changes made: Restored the applications
Prioritize additional investments in our cybersecurity defenses
Continue to monitor online forums and marketplaces for any information relating to this event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGAug 11 · first

Hawaii State AGAug 11 · first

Montana State AGAug 11 · first

California State AGAug 11 · first · this page

South Carolina State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-571704
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2023
Raw hash: 8f13d333688408e338de292b3398bcf96cc31c8318969f875557776f0a8d1f78

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEP Global Production Solutions, LLC

Victim entityEntertainment Partners

Incidentdiscovered Jun 30, 2023

Stated responseTook the applications offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov