DisclosureLens
MalwareRansomwareRansom DemandedCustomer Data InvolvedGovernment IDHighContained

MRA - The Management Association

bd_623946504b2e541d · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 1, 2024

Filed

May 10, 2024

To disclose

10 weeks

Affected · nationwide

3,4771 in this filing

Confidence

50%
Full breach record for MRA - The Management Association →4 incidents on file

A ransomware attack on MRA - The Management Association, a non-profit organization, occurred between June 30, 2023, and July 29, 2023. The breach was discovered on March 1, 2024. The attackers acquired names and Social Security Numbers. One Maine resident was affected out of a total of 3,477 individuals. The company provided written notification to affected consumers on May 9, 2024, and offered 12 months of credit monitoring and identity theft protection services through IDX.

Maine clockDiscovered Mar 1, 2024 → Filed with AG May 10, 202470d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 245 days
discovery → filing · 10 weeks / 70 days

Jun 30, 2023

Begins

Mar 1, 2024

Discovered

May 10, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,477 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.