UP Entertainment suffered a malware attack on May 19, 2021, compromising the personal data of at least one Maine resident. The exposed information may include highly sensitive details such as name, address, Social Security number, and passport number, though it remains unclear whether the attackers accessed or exfiltrated specific files. The breach was reported to the Maine Attorney General’s Office, and affected individuals began receiving written notifications around September 14, 2021 nearly four months after the incident. The delay in disclosure raises concerns about the company’s incident response timeline and the potential misuse of the stolen data, which could lead to identity theft, financial fraud, or other malicious activities targeting the impacted individual. The attack highlights vulnerabilities in UP Entertainment’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII) from unauthorized access via malware.
TPRM report: https://www.rankiteo.com/company/up-entertainment
"id": "up-1011090725",
"linkid": "up-entertainment",
"type": "Cyber Attack",
"date": "5/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 1,
'industry': 'Entertainment',
'name': 'UP Entertainment',
'type': 'Company'},
{'industry': 'Legal/Regulatory',
'location': 'Maine, USA',
'name': "Maine Attorney General's Office",
'type': 'Government'}],
'customer_advisories': 'Written notice sent to affected individual(s)',
'data_breach': {'data_exfiltration': 'Unclear if files were accessed or '
'exfiltrated',
'number_of_records_exposed': 1,
'personally_identifiable_information': ['name',
'address',
'Social Security '
'number',
'passport'],
'sensitivity_of_data': 'High (includes SSN and passport)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2021-05-19',
'description': "The Maine Attorney General's Office reported that UP "
'Entertainment experienced a malware attack on May 19, 2021, '
'potentially affecting the personal information of one Maine '
'resident. The compromised information may include name, '
'address, Social Security number, and passport, although it is '
'unclear if any specific files were accessed. Written notice '
'to the affected individual began on or about September 14, '
'2021.',
'impact': {'data_compromised': ['name',
'address',
'Social Security number',
'passport'],
'identity_theft_risk': 'Potential (due to exposed PII)'},
'references': [{'source': "Maine Attorney General's Office"}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
"General's Office "
'notified'},
'response': {'communication_strategy': 'Written notice to affected '
'individual(s) began on or about '
'September 14, 2021'},
'title': 'Malware Attack on UP Entertainment Affecting Personal Information '
'of a Maine Resident',
'type': 'Malware Attack'}