MTG USA, Inc.
bd_0018a6255b8b67f8 · schema v1 · pii pii-v1
Full breach record for MTG USA, Inc. →MTG USA, Inc. reported a data security incident on its website www.ReFaUSA.com occurring between June 25, 2020, and June 15, 2021. The breach potentially exposed payment card information, names, and addresses. MTG suspended transactions, moved the server offline, and engaged forensic specialists. No evidence of misuse was found, but the company offered two years of Experian IdentityWorks to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 25, 2020
Begins
Sep 9, 2021
Discovered
Sep 21, 2021
Scope determined
Sep 26, 2021
Filed
vs. sector median
7 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_3a8167a3ce491ba02021-09-22 · +4dVerified
- Montana State AGbd_323a0014aad80b9c2021-09-21 · +5dCandidate
- Massachusetts State AGbd_715d022fb0c6b74c2021-10-05 · +9dVerified
- New Hampshire State AGbd_126102988a4775572021-10-08 · +12dVerified
Show 1 more filing ↓Show fewer ↑up to 16d gap
- Indiana State AGbd_936c4266b33dd3c72021-09-10 · +16dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 10 (IN), last Oct 8 (NH) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.