MalwareOtherRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

PLAYHOUSE SQUARE FOUNDATION

bd_f95c8c312bfd0f42 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 29, 2020

Filed

Dec 18, 2020

To disclose

25 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for PLAYHOUSE SQUARE FOUNDATION →

Playhouse Square Foundation, a Cleveland performing arts organization, notified the NH AG of a ransomware incident. Unauthorized access occurred June 22-29, 2020, discovered June 29, 2020. One NH resident's name and payment card data were affected. Notification sent Dec 16, 2020. Response included forensic investigation and credit monitoring via IDX. Remediation included EDR deployment and employee training.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 25 weeks / 172 days

Jun 22, 2020

Begins

Jun 29, 2020

Discovered

Dec 18, 2020

Filed

vs. sector median

+16 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_795f05567ff8cc5d2020-12-17 · +1dVerified by operator
Massachusetts State AGbd_25bd0527c26868072020-12-21 · +3dVerified
Montana State AGbd_571fe0a93d7899d72020-12-11 · +7dCandidate

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: PLAYHOUSE SQUARE FOUNDATION
norm: playhouse square
Industry: Otherllm

Discovered: Jun 29, 2020
Breach occurred: Jun 22, 2020 – Jun 29, 2020
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 16, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Launched an internal investigation with the assistance of a leading independent computer forensics firm
Undertook a review of the affected data
Offering the potentially affected individuals credit monitoring, identity protection services, and identity theft insurance at no cost through IDX
Changes made: Deploying an advanced endpoint detection and response tool on its systems that is monitored by an external cybersecurity firm
Implementing additional employee training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(172 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGDec 11 · first

Maine State AG+6d

New Hampshire State AG+7d · this page

Massachusetts State AG+10d

Pattern: first filing Dec 11 (MT), last Dec 21 (MA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/playhouse-square-foundation-20201218.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2020
Raw hash: e521382bdaecf79f3ff1e345172edd6d7f54aa52c95935aa7aa7ab0b119cac14

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityPLAYHOUSE SQUARE FOUNDATION

Incidentdiscovered Jun 29, 2020

Stated responseLaunched an internal investigation with the assistance of a leading independent computer forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov