HackingCustomer Data InvolvedIDENTITY_BASICMediumContained
Metropolitan Marine Maintenance Contractors' Association, Inc.
bd_234af4562f4ff4e4 · schema v1 · pii pii-v1
Full breach record for Metropolitan Marine Maintenance Contractors' Association, Inc. →Metropolitan Marine Maintenance Contractors' Association (MMMCA) reported an external system breach (hacking) occurring on March 31, 2026, discovered on April 11, 2026. The incident affected 25,528 individuals, including 1 Maine resident. The breach involved the acquisition of names and other personal identifiers. MMMCA provided written notification to affected individuals on May 22, 2026, and offered 12 months of identity theft protection services through Experian IdentityWorks.
Maine clockDiscovered Apr 11, 2026 → Filed with AG May 25, 202644d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_42594df9051817a6Indiana State AGfiled 2026-05-22(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/235cef05-61cf-4041-bffa-58673a8f3cb4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2026
- Raw hash
- 43cd871a156375cdf043312e735da48ef18da1ea8b571f7c02c55e9ba5c7fe79
Reporting entity
- Name
- Metropolitan Marine Maintenance Contractors' Association, Inc.norm: metropolitan marine maintenance contractors
- Domain
- mmmca.org
Victim entity
- Name
- Metropolitan Marine Maintenance Contractors' Association, Inc.norm: metropolitan marine maintenance contractors
- Domain
- mmmca.org
Incident
- Discovered
- Apr 11, 2026
- Materiality determined
- —
- Notification sent
- May 22, 2026
- Affected individuals
- 25,528
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- ME AG >30d · 44d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 11, 2026→ Filed with AG: May 25, 202644d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.