UP Entertainment suffered a malware attack on May 19, 2021, compromising the personal data of at least one Maine resident. The exposed information may include highly sensitive details such as name, address, Social Security number, and passport number, though it remains unclear whether the attackers accessed or exfiltrated specific files. The breach was reported to the Maine Attorney General’s Office, and affected individuals began receiving written notifications around September 14, 2021—nearly four months after the incident. The delay in disclosure raises concerns about the company’s incident response timeline and the potential misuse of the stolen data, which could lead to identity theft, financial fraud, or other malicious activities targeting the impacted individual. The attack highlights vulnerabilities in UP Entertainment’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII) from unauthorized access via malware.