DisclosureLens
HackingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Mity, Inc.

bd_6beccec9bbee5a14 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 6, 2024

Filed

Jan 27, 2025

To disclose

47 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%
Full breach record for Mity, Inc. →2 incidents on file

Mity, Inc. notified the California Attorney General of a data security incident where an unauthorized third party gained access to systems on or around March 6, 2024. The incident potentially exposed first name, last name, address, Social Security Number, and Social Insurance Number. The company engaged an incident response team, worked with law enforcement, and contained the access. Affected individuals are offered 12 months of identity monitoring.

Incident timeline

discovery → filing · 47 weeks / 327 days

Mar 6, 2024

Begins

Mar 6, 2024

Discovered

Jan 27, 2025

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGJan 17 · first
California State AG+10d · this page

Pattern: first filing Jan 17 (IN), last Jan 27 (CA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.