HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumContained
New MVT LLC
bd_4834a1cbc0d065ed · schema v1 · pii pii-v1
Full breach record for New MVT LLC →New MVT LLC d/b/a Magic Vacation Title notified the Maryland AG that its third-party IT provider experienced unauthorized network activity, leading to unauthorized access to files on MVT's network. The incident affected 39 Maryland residents, exposing names, SSNs, and financial information. MVT engaged specialists, conducted a review, and offered 12 months of credit monitoring.
Maryland clock✗ MD AG >90d28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2f4d7db2899fff24Indiana State AGfiled 2025-02-03Verified
- bd_4d279114b7810687Maine State AGfiled 2025-02-03Verified
- bd_c4f3071b0040c459Vermont State AGfiled 2025-02-03Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376293.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- 02c5c3d05af99c30b8cbef3518771516bf3d79dd1c0b0ba53c19a0f4fac7c6c7
Reporting entity
- Name
- New MVT LLCnorm: new mvt
Victim entity
- Name
- New MVT LLCnorm: new mvt
Incident
- Discovered
- Jul 23, 2024
- Materiality determined
- —
- Notification sent
- Feb 3, 2025
- Affected individuals
- 39
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney General
- Third party
- via third-party IT provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 28 weeks(195 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.