HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Swavelle Group | Mill Creek Fabrics
bd_12ce3505051bd787 · schema v1 · pii pii-v1
Full breach record for Swavelle Group | Mill Creek Fabrics →Swavelle Group | Mill Creek Fabrics notified Massachusetts residents of a data security incident occurring between September 26-28, 2025, discovered on April 10, 2026. Unauthorized acquisition of names and Social Security numbers occurred. The company secured its network, engaged forensic investigators, and offers 24 months of TransUnion credit monitoring. No evidence of financial fraud was found.
Massachusetts clock✓ MA AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-716-swavelle-and-mill-creek-fabrics-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- aa3ca0d0963c79b1cb090820fe57cca77ad20d89947ba63cc0a3641e1d68573e
Reporting entity
- Name
- Swavelle Group | Mill Creek Fabricsnorm: swavelle group mill creek fabrics
Victim entity
- Name
- Swavelle Group | Mill Creek Fabricsnorm: swavelle group mill creek fabrics
Incident
- Discovered
- Apr 10, 2026
- Materiality determined
- —
- Notification sent
- Apr 24, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- MA AG ≤30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.