HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
New MVT LLC
bd_4d279114b7810687 · schema v1 · pii pii-v1
Full breach record for New MVT LLC →New MVT LLC (d/b/a Magic Vacation Title) notified the Maine AG of a data breach stemming from unauthorized activity on its third-party IT provider's network on or about July 23, 2024. An unauthorized actor accessed files containing personal information. The review was completed December 10, 2024, and notification letters were sent February 3, 2025. Ten Maine residents and 1,854 total individuals were affected. IDX credit monitoring (12 months) was offered.
Maine clockDiscovered Dec 10, 2024 → Filed with AG Feb 3, 202555d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2f4d7db2899fff24Indiana State AGfiled 2025-02-03Verified
- bd_4834a1cbc0d065edMaryland State AGfiled 2025-02-03Candidate
- bd_c4f3071b0040c459Vermont State AGfiled 2025-02-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bc623de6-5c77-465a-b19d-0111892f5084.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- 594c216fd508d8ea9ea88e07fa1c88e8fa80c6571235f7d99957939a34bb9d02
Reporting entity
- Name
- New MVT LLCnorm: new mvt
- Industry
- Other Commercial
Victim entity
- Name
- New MVT LLCnorm: new mvt
- Industry
- Other Commercial
Incident
- Discovered
- Dec 10, 2024
- Materiality determined
- —
- Notification sent
- Feb 3, 2025
- Affected individuals
- 10
- Data types
- PII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- ME AG >30d · 55d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 10, 2024→ Filed with AG: Feb 3, 202555d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.