HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
MPB Property, LLC
bd_50395d03e108497a · schema v1 · pii pii-v1
Full breach record for MPB Property, LLC →MPB Property LLC reported an external system breach (hacking) occurring on September 7, 2025, discovered on April 23, 2026. The incident affected 2,042 individuals total, including 1 Maine resident. The breach involved the acquisition of personal identifiers, including government IDs. MPB Property LLC provided written notification and offered 12 months of credit monitoring and identity protection services via Experian.
Maine clockDiscovered Apr 23, 2026 → Filed with AG May 27, 202634d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1ca6911bdfec9a01Indiana State AGfiled 2026-05-22(5d gap)Verified
- bd_bb3abf609c31e65fMassachusetts State AGfiled 2026-05-01(26d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fb053741-273e-49aa-9a8a-a8d38e55786f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 27, 2026
- Raw hash
- 164eff33d52f6348ef58925cfc259cbb810ddc762f877b823c0c8e71c4589fd9
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
- Industry
- Legal Services
Victim entity
- Name
- MPB Property, LLCnorm: mpb property
- Industry
- Real Estate
Incident
- Discovered
- Apr 23, 2026
- Materiality determined
- —
- Notification sent
- May 22, 2026
- Affected individuals
- 2,042
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with the Maine Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 23, 2026→ Filed with AG: May 27, 202634d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.