⛰️New Hampshire State AGlinked via multistate filing link · 100%
Clustered 7 filings across 7 jurisdictions · filed Oct 14, 2024. View entity profile → Other incidents for this victim →
incident inc_d462af38229c46a6 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA IN ME MT NH VT WA
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
May 24, 2024
When the intrusion reportedly occurred, per the linked filings
May 24, 2024
Reported by NEW HAMPSHIRE AG, WASHINGTON AG, MAINE AG, VERMONT AG, CALIFORNIA AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Varsity Brands, LLC reported a data breach discovered on May 24, 2024, where an unauthorized third party accessed company files containing personal information. The company took systems offline, engaged external cybersecurity experts, notified law enforcement, rotated credentials, and offered complimentary TransUnion credit monitoring to affected individuals.
Varsity Brands Inc, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2024-05-24 and filed notice on 2024-10-14. 934 Washington residents were affected. 143 days elapsed between awareness and notification. 2 days to identify the breach. 1 days to contain the breach.
Affected (this filing): 934
On May 24, 2024, Varsity Brands Inc identified unusual activity on its systems. Investigation revealed an unauthorized third party obtained a small subset of company files containing personal information. The breach occurred on May 22, 2024 and was discovered May 24, 2024. 65,669 individuals were affected nationally, including 90 Maine residents. Affected individuals were notified October 14, 2024 and offered 24-month TransUnion credit monitoring.
Affected (this filing): 90
On May 24, 2024, Varsity Brands, LLC identified unusual activity on its systems and determined an unauthorized third party obtained a small subset of company files containing personal information. Varsity Brands took systems offline, engaged external cybersecurity experts, notified law enforcement, rotated credentials, and implemented additional safeguards. The company is offering 24 months of complimentary credit monitoring and identity theft protection through TransUnion to affected individuals.
Varsity Brands Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-05-22 and was reported on 2024-10-14. 5,072 Indiana residents were affected. 65,669 individuals affected in total.
Affected (this filing): 65,669
Varsity Brands, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2024-10-14. The breach occurred on 5/24/2024. 84 Montana residents were affected.
Affected (this filing): 84
Varsity Brands, LLC experienced a security incident on May 22, 2024, where an unauthorized third party obtained a small subset of company files containing personal information. The company identified unusual activity on May 24, 2024, promptly took systems offline, and engaged external cybersecurity experts. Affected individuals are offered 24 months of complimentary credit monitoring.