BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION

ent_019e0ce5ebf1c8c4669be6aea04ceb4e

Compliance scorecard →View in feed →

Disclosures

State AG · HHS OCR · 13 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

103,879

nationwide · State AG TX

Leak-site claims

none in sample

Identity resolution

Canonical name: BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION
Normalized: brightstar global— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300Q4QZEOJMM3MV46
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (14)newest first

Nebraska State AGas reporting2025-11-21
IGT Group and Brightstar Lottery Group experienced unauthorized access to internal corporate systems on November 17, 2024. The incident exposed personal information including names, contact info, DOB, government IDs (SSN, driver's license), financial account data, and health data. The companies reported the incident to law enforcement, resecured systems, and engaged Kroll to provide 24 months of complimentary identity monitoring for affected individuals. The investigation was completed on August 21, 2025, triggering notifications to affected individuals.
Texas State AGas victim2025-11-07
Brightstar Global Solutions Corporation based in Providence, Rhode Island, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2024-11-17 and reported on 2025-11-07. 4,740 Texas residents were affected. 103,879 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail.
New Hampshire State AGas victim2025-10-09
Brightstar Global Solutions Corporation notified the NH Attorney General of a security incident discovered on November 17, 2024, affecting 130 NH residents. Unauthorized access to internal systems exposed names, DOBs, government IDs, financial data, and health data. The company engaged law enforcement, conducted forensic reviews, and is providing credit monitoring.
Rhode Island State AGas victim2025-10-08
Brightstar Global Solutions Corporation notified the Rhode Island Attorney General of a cybersecurity incident discovered on November 17, 2024. An unauthorized third party accessed internal corporate systems, compromising personal information of 6,354 Rhode Island residents. Data exposed included names, contact info, DOB, government IDs (SSN, driver's license), financial account info, and health data. The company resecured systems, engaged law enforcement, and is providing credit monitoring via Kroll.
Maine State AGas reporting2025-10-03
Brightstar Lottery Group experienced an external system breach on November 17, 2024, affecting 103,879 individuals. The incident exposed names, government IDs, financial accounts, and health data. Notices were sent on October 3, 2025, offering 24 months of identity monitoring via Kroll. The investigation concluded on August 21, 2025.
Washington State AGas reporting2025-10-03
IGT Group and Brightstar Lottery Group experienced a ransomware incident on November 17, 2024, affecting systems holding names, SSNs, driver's licenses, financial data, and health data. 1,796 Washington residents were notified. The company engaged Kroll for credit monitoring and reported to law enforcement.
California State AGas reporting2025-10-03
Brightstar Lottery Group and IGT Group discovered unauthorized access to internal corporate systems on November 17, 2024. The incident involved personal information including names, contact info, dates of birth, government IDs (SSN, driver's license), financial account info, and health data. A manual data review was completed on August 21, 2025. The company engaged Kroll for 24 months of identity monitoring and reported the incident to law enforcement.
Vermont State AGas reporting2025-10-03
IGT Group and Brightstar Lottery Group experienced unauthorized access to internal corporate systems on November 17, 2024. The incident exposed personal information including names, DOBs, government IDs (SSN, driver's license), financial account data, and health data. The companies engaged Kroll to provide 24 months of identity monitoring services to affected individuals.
Oregon State AGas victim2025-10-03
Brightstar Global Solutions Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2025-10-03. 103,879 individuals were affected.
RHODE ISLANDHHS OCRas victim2025-10-03
Brightstar Global Solutions Corporation reported to HHS on 2025-10-03 a Hacking/IT Incident affecting 103879 individuals. Breached information located on Network Server.
Massachusetts State AGas victim2025-10-03
Brightstar Global Solutions Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-10-03. 1,483 Massachusetts residents were affected.
Indiana State AGas victim2025-10-03
Brightstar Global Solutions Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-17 and was reported on 2025-10-03. 888 Indiana residents were affected. 103,879 individuals affected in total.
Montana State AGas victim2025-10-03
Brightstar Global Solutions Corporation reported a data breach to the Montana Attorney General. The breach was reported on 2025-10-03. The breach occurred on 11/17/2024. 208 Montana residents were affected.
Illinois State AGas victim2025-10-01
BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION filed a data-breach notice with the Illinois Attorney General in October 2025 (case 25-10-497). The register records the breach as discovered on November 17, 2024. Personal information types reported: drivers license, financial account number, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.