HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Mark Thomas
bd_0cf5b6183c2f8305 · schema v1 · pii pii-v1
Full breach record for Mark Thomas →Mark Thomas notified Maryland AG of a breach involving personal and health information of affected residents. The incident involved unauthorized access via compromised credentials. Mark Thomas is offering 12 months of credit monitoring and advising on fraud alerts.
Leak gap clock⏱ Leak >90d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 4 about the same incident.View merged incident
A leak claim by lynx about this victim predates this filing by 153 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c2aaa036ce369266Leak Sitelynxfiled 2024-10-15(153d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_3504e41c57bc3b57Montana State AGfiled 2025-03-17Verified
- bd_d4dea20565b11d2cCalifornia State AGfiled 2025-03-17Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376560.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2025
- Raw hash
- 093b831b0acd874bcfd7841ead14fdc5a04462bbf114ba9528478173bf709c32
Reporting entity
- Name
- Mark Thomasnorm: mark thomas
Victim entity
- Name
- Mark Thomasnorm: mark thomas
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Mar 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Compliance flags
- Leak >90d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.