On November 18, 2025, Score Sports disclosed a major cybersecurity breach affecting 8,430 individuals, exposing personally identifiable information (PII) and financial data. The incident was first detected on August 7, 2025, following suspicious activity on their website. A forensic investigation confirmed unauthorized access occurred over four months (April 14–August 19, 2025). Compromised data included names, addresses, phone numbers, and payment card details, heightening risks of identity theft and financial fraud. The breach was reported to the Maine Attorney General, and affected individuals were notified via mail. Score Sports secured its systems, engaged cybersecurity experts, and offered complimentary credit monitoring (Cyberscout) to mitigate harm. The prolonged exposure period and the nature of stolen data customer PII and financial records indicate a severe breach with potential long-term repercussions for victims, including fraud and reputational damage to the company.
Source: https://www.claimdepot.com/data-breach/score-sports-2025
TPRM report: https://www.rankiteo.com/company/fn-manufacturing
"id": "fn-2492924111925",
"linkid": "fn-manufacturing",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '8,430',
'industry': 'Sports Retail/E-commerce',
'name': 'American Soccer Company Inc. DBA Score Sports',
'type': 'Private Company'}],
'customer_advisories': ['Mail notifications to impacted individuals with '
'recommendations for credit monitoring'],
'data_breach': {'data_exfiltration': 'Likely (based on exposure of data)',
'number_of_records_exposed': '8,430',
'personally_identifiable_information': ['Names',
'Addresses',
'Phone numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['PII', 'Financial Information']},
'date_detected': '2025-08-07',
'date_publicly_disclosed': '2025-11-18',
'description': 'On Nov. 18, 2025, American Soccer Company Inc. DBA Score '
'Sports disclosed a significant cybersecurity event '
'compromising personally identifiable information (PII) and '
'financial information of at least 8,430 individuals. The '
'breach was first detected on Aug. 7, 2025, with unauthorized '
'access occurring between April 14, 2025, and Aug. 19, 2025. '
'Exposed data included names, addresses, phone numbers, and '
'payment card information, posing risks of identity theft and '
'financial fraud.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'exposure of sensitive customer data',
'data_compromised': ['PII (names, addresses, phone numbers)',
'Payment card information'],
'identity_theft_risk': 'High (due to exposure of PII)',
'payment_information_risk': 'High (due to exposure of payment card '
'information)',
'systems_affected': ['Website']},
'initial_access_broker': {'high_value_targets': ['Customer PII and financial '
'data'],
'reconnaissance_period': 'April 14, 2025 – Aug. 19, '
'2025 (4 months)'},
'investigation_status': 'Completed (as of public disclosure)',
'recommendations': ['Offering complementary credit monitoring services '
'through Cyberscout to affected individuals'],
'references': [{'source': 'Score Sports Data Breach Notification '
'(hypothetical)'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
"General's office"]},
'response': {'communication_strategy': ['Disclosure to Maine Attorney '
"General's office",
'Mail notifications to impacted '
'individuals'],
'containment_measures': ['Secured the website'],
'incident_response_plan_activated': True,
'third_party_assistance': ['Cybersecurity specialists '
'(unspecified)']},
'title': 'Data Breach at American Soccer Company Inc. DBA Score Sports',
'type': 'Data Breach'}