HackingData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPIIMediumActive
MAR-BAL, INC.
bd_3d9e5ec5c1b6902d · schema v1 · pii pii-v1
Full breach record for MAR-BAL, INC. →Mar-Bal, Inc. notified the Maryland AG of unauthorized access to its network between Aug 21-22, 2024. Files were taken containing names, SSNs, financial account info, and health insurance info. Only 2 Maryland residents were identified as affected. Mar-Bal notified federal law enforcement, engaged third-party specialists, and is offering 12 months of credit monitoring via Experian.
Maryland clock✗ MD AG >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376405.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2025
- Raw hash
- 54442f53e719cb87051b1dab3ac9895945bc46014102863faa684ac58ce2dc4f
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- MAR-BAL, INC.norm: mar bal
Incident
- Discovered
- Aug 22, 2024
- Materiality determined
- —
- Notification sent
- Feb 24, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified Maryland Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(186 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.