HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Mutti
bd_3b7373972afc03c3 · schema v1 · pii pii-v1
Full breach record for Mutti →Mutti USA Inc. notified the New Hampshire Attorney General of a data breach affecting one NH resident. Unauthorized access to a server occurred between September 13, 2025, and December 1, 2025. The incident involved the potential acquisition of names and Social Security numbers. Mutti USA engaged forensic specialists, contained the threat, and offered complimentary credit monitoring to the affected individual.
Leak gap clock⏱ Leak >30d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by cl0p about this victim predates this filing by 81 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mutti-usa-20260330.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 30, 2026
- Raw hash
- 34f27c8fe03de8a4d9c08c70c7335892cf7051391210585a02706284ce32d782
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Muttinorm: mutti
- Domain
- mutti-parma.com
Incident
- Discovered
- Nov 28, 2025
- Materiality determined
- —
- Notification sent
- Mar 25, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(122 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.