HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Morningstar Properties
bd_37171ee30d021e25 · schema v1 · pii pii-v1
Full breach record for Morningstar Properties →Morningstar Properties, LLC notified Massachusetts residents of a data incident occurring November 12-13, 2025. An unauthorized actor accessed systems, potentially viewing customer and employee information including names, SSNs, and DOBs. The company took systems offline, engaged forensic specialists, and notified law enforcement. Affected individuals were offered 12 months of credit monitoring via Experian.
Massachusetts clock✗ MA AG >90d24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 134 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_3ce855262eb59b58Leak Siteakirafiled 2025-12-18(134d gap)Candidate
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-816-morningstar-properties-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- eaeb52278937459a4e295fa51b7d8189018c3ddb0445ee1726d7e65137cd18e5
Reporting entity
- Name
- Morningstar Propertiesnorm: morningstar properties
- Domain
- mstarproperties.com
Victim entity
- Name
- Morningstar Propertiesnorm: morningstar properties
- Domain
- mstarproperties.com
Incident
- Discovered
- Nov 13, 2025
- Materiality determined
- —
- Notification sent
- May 19, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- MA AG >90dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.