DISH NETWORK CORPORATION

DISH Network, LLC notified South Carolina residents of a cybersecurity incident discovered on February 23, 2023, involving ransomware that encrypted internal servers and IT telephony systems. The attackers extracted employee and former employee personal information. DISH engaged forensic experts, notified law enforcement, and offered two years of credit monitoring. No evidence of misuse was found.

DISH Network L.L.C. experienced a cybersecurity incident beginning around February 22–23, 2023, in which unauthorized actors extracted data from internal IT systems and servers. Customer databases were not accessed; affected data included employee and former employee records and personal information of a limited number of other individuals. The data review was substantially completed on May 8, 2023. Confirmation was received that the extracted data has been deleted. Two years of free credit monitoring through TransUnion were offered to affected individuals.

DISH Network L.L.C. experienced an external system breach between February 22 and February 23, 2023, discovered on May 8, 2023. The incident affected 296,851 individuals, compromising their names and driver's license or non-driver identification card numbers. In response, DISH provided written notification to affected parties between May 15 and May 18, 2023, and offered two years of identity monitoring services through TransUnion.

DISH Network, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-18. The breach occurred during 2/22/2023 - 2/23/2023. The breach was discovered on 5/8/2023. 296,832 individuals were affected. Notice was sent on 5/15/2023.

DISH Network, LLC reported a cybersecurity incident on February 23, 2023, involving unauthorized access to internal servers and IT telephony systems. Data extracted included employee and individual personal information such as SSNs, driver's licenses, financial account numbers, and health/insurance records. Notices were sent to affected individuals starting May 15, 2023, offering two years of credit monitoring.

DISH Network, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-05-17. 1,429 Massachusetts residents were affected. The report records the breach type as electronic.

DISH Network, LLC experienced a cybersecurity incident on February 23, 2023, involving unauthorized access to internal servers and IT telephony systems. Data was extracted, including personal information of employees, former employees, and family members. Customer databases were not accessed. DISH confirmed the extracted data was deleted by the third party. 500 New Hampshire residents were affected. DISH offered two years of credit monitoring via TransUnion.

DISH Network, LLC notified affected individuals of a cybersecurity incident announced on February 23, 2023, involving unauthorized access to internal servers and IT telephony. The incident resulted in the extraction of employee-related personal information. DISH engaged forensic experts, notified law enforcement, and offered two years of free credit monitoring. No evidence of misuse was found.

DISH Network, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-02-22 and was reported on 2023-05-15. 3,404 Indiana residents were affected. 296,832 individuals affected in total.

DISH Network Corporation disclosed in a Form 8-K filed February 28, 2023 that on February 23, 2023 it had announced on its earnings call a network outage affecting internal servers and IT telephony, which the Corporation determined was due to a cyber-security incident (the filing's forward-looking statements refer to it as a ransomware attack). On February 27, 2023, the Corporation became aware that certain data was extracted from its IT systems, and it is possible the investigation will reveal that the extracted data includes personal information. The forensic investigation is ongoing and law enforcement authorities have been notified. DISH, Sling and the wireless and data networks remained operational, while internal communications, customer call centers and internet sites were affected.

DISH NETWORK, LLC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-316). The register records the breach as discovered on February 23, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.