HackingStolen CredentialsCapture Stored DataTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPIIMediumContained
iHeartMedia
bd_f62e05c4999cd563 · schema v1 · pii pii-v1
Full breach record for iHeartMedia →iHeartMedia + Entertainment, Inc. disclosed a data breach occurring between December 24-27, 2024, where an unauthorized actor accessed files at local stations. Affected data included names, government IDs, financial account info, payment card data, and health information. The company engaged a cybersecurity firm, notified law enforcement, and strengthened security measures.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3039dbe2a94d0e4eCalifornia State AGfiled 2025-04-30Verified
- bd_470abb724ceca2e8Maine State AGfiled 2025-04-30Candidate
- bd_f8eaf82e7a27b649New Hampshire State AGfiled 2025-04-30Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-30-iheartmedia-entertainment-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 30, 2025
- Raw hash
- cd2812e9a537d5d390ec15ab5c6f6bdd47fcfb13eeb7d4f00c162f628bb1c7b8
Reporting entity
- Name
- iHeartMedianorm: iheartmedia
Victim entity
- Name
- iHeartMedianorm: iheartmedia
Incident
- Discovered
- Dec 27, 2024
- Materiality determined
- Apr 11, 2025
- Notification sent
- Apr 30, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(124 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.