HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Crystal Bay Casino
bd_fb79e1791bba8063 · schema v1 · pii pii-v1
Full breach record for Crystal Bay Casino →Crystal Bay Casino notified individuals that their information may have been copied from its systems on or around November 27, 2022. The casino identified unusual activity in November 2022 and initiated an investigation. Affected data includes names and potentially other personal information. The company reported the incident to the FBI and is offering complimentary credit monitoring.
California clockDiscovered Nov 1, 2022 → Notified Feb 24, 2023115d ✗ CA 60-day late16 weeks discovery → filing
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_09d311cad9d34b3bVermont State AGfiled 2023-02-24Verified
- bd_537251f71a609215Oregon State AGfiled 2023-02-24Candidate
- bd_743f2080c8c7d3a0Montana State AGfiled 2023-02-24Verified
- bd_d1f04738c35f60ceMaine State AGfiled 2023-02-24Verified
Show 4 more filings ↓Show fewer ↑up to 38d gap
- bd_fdeb40f7cd1fe562Washington State AGfiled 2023-02-24Verified
- bd_626acf628d698127California State AGfiled 2023-03-29(33d gap)Verified
- bd_945f609227dd9a05Maine State AGfiled 2023-03-29(33d gap)Verified
- bd_c63b5c4ded012f30New Hampshire State AGfiled 2023-04-03(38d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-563594
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2023
- Raw hash
- fd999dbbabc4b8344676220d93e656bd4ee27640838222501fe36002e1a19779
Reporting entity
- Name
- Crystal Bay Casinonorm: crystal bay casino
Victim entity
- Name
- Crystal Bay Casinonorm: crystal bay casino
Incident
- Discovered
- Nov 1, 2022
- Materiality determined
- —
- Notification sent
- Feb 24, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the activity to the FBI
Compliance
- Time to disclose
- 16 weeks(115 days from discovery to filing)
- Compliance flags
- CA 60-day late · 115d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 1, 2022→ Notified: Feb 24, 2023115d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.