HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDPHIHighContained

Another Planet Entertainment

bd_f8a0e7a5af714ec9 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 9, 2018

Filed

Oct 2, 2018

To disclose

25 weeks

Affected

2,357state residents only

Linked

4 filings

Confidence

66%

Full breach record for Another Planet Entertainment →

Another Planet Entertainment (APE) notified the California Attorney General of a data security incident. On April 9, 2018, APE discovered unusual activity in its email system. An investigation confirmed that an unauthorized individual accessed emails containing personal information, including names, addresses, Social Security numbers, and limited medical information. The incident affected 2,357 California residents. APE secured the email system, engaged a forensics firm, notified law enforcement, and provided one year of complimentary credit and identity monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 9, 2018 → Notified Oct 2, 2018176d ✗ CA 60-day late25 weeks discovery → filing

Incident timeline

discovery → filing · 25 weeks / 176 days

Apr 9, 2018

Begins

Apr 9, 2018

Discovered

Oct 2, 2018

Filed

vs. sector median

+13 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_0394ce7ed162ed702018-10-03 · +1dVerified
New Hampshire State AGbd_6d7260dee9071ba72018-10-03 · +1dVerified
Montana State AGbd_2c6854f25cb9ac782018-09-27 · +5dCandidate

Name: Another Planet Entertainment
norm: another planet entertainment

Name: Another Planet Entertainment
norm: another planet entertainment
Industry: Healthcarellm

Discovered: Apr 9, 2018
Breach occurred: Apr 9, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 2, 2018
Affected individuals: 2,357state-resident count only
Data types: Identity (basic)Government IDPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email Collection
Threat actor: External
Regulator citations: Notified California Attorney General

During the incident: Took immediate steps to secure the email system
Launched an internal investigation
Notified law enforcement
Retained a leading forensics firm to perform an independent investigation
Provided twelve months of complimentary credit and identity monitoring services to the affected residents through Kroll
Changes made: Enhanced the security of our email system and network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: CA 60-day late · 176d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 9, 2018
→ Notified: Oct 2, 2018
176d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 9, 2018 → Notified: Oct 2, 2018	176d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGSep 27 · first

California State AG+5d · this page

Massachusetts State AG+6d

New Hampshire State AG+6d

Pattern: first filing Sep 27 (MT), last Oct 3 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-140302
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 2, 2018
Raw hash: 9e58634b07a17f2e6e287d3305160ed10cf3d85495f9b0aeaab868eb38280937

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAnother Planet Entertainment

Victim entityAnother Planet Entertainment

Incidentdiscovered Apr 9, 2018

Stated responseTook immediate steps to secure the email system

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov