Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Penn LLC d/b/a Pulse TV
  • Street Address: 7851 185th St Suite 106
  • City: Tinley Park
  • State, or Country if outside the US: IL
  • Zip Code: 60477

Submitted By

  • Name: Matthew Meade
  • Title: Legal Counsel
  • Firm name (if different than entity): Eckert Seamans
  • Telephone Number: 4125666983
  • Email Address: mmeade@eckertseamans.com
  • Relationship to entity whose information was compromised: Legal Counsel

Breach Information

  • Total number of persons affected (including residents): 227,769
  • Total number of Maine residents affected: This notice is provided as a supplement to the notices PulseTV submitted on December 30, 2022 and January 24, 2022 (the “Prior Notices”). The Prior Notices advised that PulseTV experienced a data breach involving PulseTV’s website and the credit card information of 753 Maine residents. Although PulseTV had not confirmed the cause of the data breach when it sent the earlier notices, PulseTV determined that in an abundance of caution, it would provide written notice to these individuals in January of 2022. On February 2, 2022, PulseTV’s continuing investigation revealed that the incident was caused by a malware attack on a webserver hosted and maintained by Freestyle Solutions, a software vendor that hosts PulseTV’s website, among others’. The malware captured PulseTV customers’ card data and saved it to a file on Freestyle’s systems, which PulseTV could not access. PulseTV immediately alerted Freestyle, instructed them to disable the malware, and confirmed that it was successfully disabled. On February 15, 2022, the PCI-DSS Forensic Investigator confirmed to PulseTV that the period of potential compromise ended on February 2, 2022. As a result, PulseTV will be sending a new round of notices to customers whose credit cards could have been compromised between September 1, 2021 and February 2, 2022. After working with a vendor to locate current addresses for these individuals, PulseTV learned, on February 24, 2022, that the new round of notifications will include 127 Maine residents.
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 11/1/2019 - 2/2/2022
  • Date Breach Discovered: 2/15/2022
  • Description of the Breach:
    • Other
    • If other, please specify: External systems breach at a vendor
  • Information Acquired - Name or other personal identifier in combination with: Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 3/15/2022 - 3/17/2022
  • Copy of notice to affected Maine residents: PulseTV Ad Repeat Notice r3prf_FINAL PROOF ROUND II.pdf
  • Date of any previous (within 12 months) breach notifications: This notice is provided as a supplement to the notices PulseTV submitted on December 30, 2022 and January 24, 2022.
  • Were identity theft protection services offered: No
  • If yes, please provide the duration, the provider of the service and a brief description of the service: N/A