HackingVulnerability ExploitData ExfiltratedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
TSG Interactive US Services Limited
bd_f8b60acc4589ccc6 · schema v1 · pii pii-v1
Full breach record for TSG Interactive US Services Limited →TSG Interactive US Services Limited (PokerStars) notified Vermont AG of a data breach involving the MOVEit Transfer application. Unauthorized access occurred May 30-31, 2023, exploiting a vulnerability announced by Progress Software. Affected data included names, addresses, and SSNs. PokerStars engaged external experts, notified law enforcement, discontinued use of the application, and offered 24 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5b308c47201ad4bdMaine State AGfiled 2023-07-20Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-07-20-pokerstars-tsg-interactive-us-services-limited-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 20, 2023
- Raw hash
- 1f6f8c283cee314ed1e08cf1db8c02d8f15a0a679fa8e74169a2c2d7c6077b99
Reporting entity
- Name
- TSG Interactive US Services Limitednorm: tsg interactive us
Victim entity
- Name
- TSG Interactive US Services Limitednorm: tsg interactive us
Incident
- Discovered
- Jun 2, 2023
- Materiality determined
- Jul 20, 2023
- Notification sent
- Jul 20, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
- Third party
- via Progress Software Corporation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.