HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Melwood Inc
bd_358415406c58746a · schema v1 · pii pii-v1
Full breach record for Melwood Inc →Melwood, Inc. notified consumers of a data breach occurring between August 9-17, 2025, where an unknown actor accessed its network and copied files containing names and other personal information. Notification was sent on January 26, 2026. Melwood is providing complimentary identity monitoring and evaluating additional technical measures and staff training to prevent recurrence.
Vermont clock✗ VT AG >45 bday23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by sinobi about this victim predates this filing by 139 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_94b45510195fb47aNew Hampshire State AGfiled 2026-01-26Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-26-melwood-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2026
- Raw hash
- 2f64afa4d7cf359b1296fcb5ad908707868b6cf417cce78ad22b37736a377fe3
Reporting entity
- Name
- Melwood Incnorm: melwood
- Domain
- melwood.org
Victim entity
- Name
- Melwood Incnorm: melwood
- Domain
- melwood.org
Incident
- Discovered
- Aug 17, 2025
- Materiality determined
- —
- Notification sent
- Jan 26, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.