Amateur Athletic Union

AAU notified NH AG of a data security event affecting 965 NH residents. Malicious code on play.aausports.org checkout page captured payment card info (name, address, card number, expiration, CVV) from Oct 1, 2018 to July 2, 2019. Discovered Aug 2, 2019. Code removed, enhanced security measures implemented.

The Amateur Athletic Union (AAU) notified affected individuals that malicious code on its checkout page captured payment card data and personal information from October 1, 2018, to July 2, 2019. The incident was discovered on August 2, 2019, with forensic assistance. The code was removed and enhanced security measures implemented. While a total count was not provided, 1,158 Rhode Island residents were specifically identified as impacted.

The Amateur Athletic Union (AAU) disclosed a cybersecurity incident involving its website play.aausports.org. Between October 1, 2018, and July 2, 2019, malicious code captured payment card information (name, address, card number, expiration, CVV) from the checkout page. AAU identified the code on August 2, 2019, with forensic investigators, removed it, and notified regulators. The incident involved customer payment data.

AAU notified Hawaii OCP of a data event affecting 2,977 residents. Malicious code on play.aausports.org checkout captured payment card info (name, address, card number, CVV) from Oct 2018 to July 2019. Detected Aug 2, 2019. Notices sent Sept 13, 2019. Forensic investigators engaged; code removed; enhanced security implemented.

Amateur Athletic Union reported a data breach to the Oregon Attorney General. The breach was reported on 2019-09-13. The breach occurred during 7/2/2019. 287,661 individuals were affected.

The Amateur Athletic Union (AAU) notified the Washington Attorney General of a cybersecurity incident affecting 12,200 Washington residents. Malicious code on the AAU checkout page captured payment card information (name, address, card number, expiration, CVV) between October 1, 2018, and July 2, 2019. The code was discovered on August 2, 2019, and removed. AAU engaged forensic investigators and implemented enhanced security measures.

AAU notified Montana residents of a breach on play.aausports.org where malicious code captured payment card data (CVV, number, expiration) from Oct 2018 to July 2019. Discovered Aug 2, 2019 via forensic investigators. Code removed and enhanced security implemented. No specific count of affected individuals disclosed in this notice.

Amateur Athletic Union reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-09-13. 4,446 Massachusetts residents were affected. The report records the breach type as electronic.

Amateur Athletic Union (AAU) identified malicious code on its website checkout page on August 2, 2019, which could have captured payment card information (cardholder name, address, credit card number, expiration date, and CVV) entered between October 1, 2018, and July 2, 2019. The code was removed, and forensic investigators were engaged. Approximately 38,925 California residents were affected. AAU notified affected individuals and regulators, and implemented enhanced security measures.