Amateur Athletic Union

The Washington State Office of the Attorney General reported a data breach involving the Amateur Athletic Union (AAU) on September 13, 2019. The breach, which occurred from October 1, 2018, to July 2, 2019, involved malware that potentially compromised the payment card information of 12,200 Washington residents, including cardholder names, addresses, credit card numbers, expiration dates, and CVV.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10509

TPRM report: https://www.rankiteo.com/company/amateur-athletic-union-of-the-united-states-inc.

"id": "ama310072625",
"linkid": "amateur-athletic-union-of-the-united-states-inc.",
"type": "Cyber Attack",
"date": "10/2018",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 12200,
                        'industry': 'Sports',
                        'location': 'Washington',
                        'name': 'Amateur Athletic Union (AAU)',
                        'type': 'Organization'}],
 'attack_vector': 'Malware',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 12200,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['cardholder names',
                                              'addresses',
                                              'credit card numbers',
                                              'expiration dates',
                                              'CVV']},
 'date_detected': '2019-07-02',
 'date_publicly_disclosed': '2019-09-13',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving the Amateur Athletic Union (AAU) on '
                'September 13, 2019. The breach, which occurred from October '
                '1, 2018, to July 2, 2019, involved malware that potentially '
                'compromised the payment card information of 12,200 Washington '
                'residents, including cardholder names, addresses, credit card '
                'numbers, expiration dates, and CVV.',
 'impact': {'data_compromised': ['cardholder names',
                                 'addresses',
                                 'credit card numbers',
                                 'expiration dates',
                                 'CVV'],
            'payment_information_risk': True},
 'references': [{'date_accessed': '2019-09-13',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'AAU Data Breach',
 'type': 'Data Breach'}