The California Office of the Attorney General disclosed a data breach at AEG Presents, LLC, which occurred on May 3, 2024. The incident involved the unauthorized transmission of company files—containing personal information such as names and Social Security numbers—to a personal email account. The breach was detected on June 18, 2024, prompting the company to implement corrective measures. However, the exact number of affected individuals remains undisclosed, leaving uncertainty about the full scope of exposure. The compromised data, including sensitive personally identifiable information (PII), poses risks of identity theft, financial fraud, or misuse. While the company acted to mitigate the incident, the delay in discovery (over a month) raises concerns about internal security protocols and monitoring capabilities. The breach highlights vulnerabilities in data handling practices, particularly regarding employee-related data leaks and the potential for exploitation of exposed records.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-587470
TPRM report: https://www.rankiteo.com/company/aeg-live
"id": "aeg016091825",
"linkid": "aeg-live",
"type": "Breach",
"date": "5/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'Unknown',
'industry': 'Entertainment / Live Events',
'location': 'California, USA',
'name': 'AEG Presents, LLC',
'type': 'Private Company'}],
'attack_vector': 'Insider Threat / Misconfigured Email',
'data_breach': {'data_exfiltration': 'Yes (transmitted to personal email)',
'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information (PII)']},
'date_detected': '2024-06-18',
'description': 'The California Office of the Attorney General reported that '
'AEG Presents, LLC experienced a data breach on May 3, 2024, '
'involving the transmission of company files containing '
'personal information, including names and social security '
'numbers, to a personal email account. The breach was '
'discovered on June 18, 2024, and the company took steps to '
'address the incident; however, the number of individuals '
'affected is unknown.',
'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
'identity_theft_risk': 'High (PII exposed)'},
'investigation_status': 'Ongoing (as of disclosure)',
'references': [{'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulations_violated': ['Potential violation of '
'California Consumer '
'Privacy Act (CCPA)'],
'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'response': {'incident_response_plan_activated': 'Yes'},
'title': 'AEG Presents, LLC Data Breach (2024)',
'type': 'Data Breach'}