HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)PIILowContained

Print Media Association

bd_6de15f48884958de · schema v1 · pii pii-v1

Severity

Low

Discovered

May 5, 2025

Filed

Sep 10, 2025

To disclose

18 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

67%

Full breach record for Print Media Association →

Print Media Association notified consumers of unauthorized access to email accounts between May 1-5, 2025. The incident involved the exposure of names and other personal information. PMA engaged outside professionals for investigation, contained the breach, and is offering credit monitoring services. The filing was submitted to the Vermont Attorney General on September 10, 2025.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday18 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 4 days

discovery → filing · 18 weeks / 128 days

May 1, 2025

Begins

May 5, 2025

Discovered

Sep 10, 2025

Filed

vs. sector median

+1 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Texas State AGbd_47617c6f0d1502e82025-09-10Candidate
Massachusetts State AGbd_72732cb046c6b7422025-09-10Verified
Indiana State AGbd_7be46161eac2d2ed2025-09-10Verified
New Hampshire State AGbd_887bf2e80a0a89132025-09-10Verified

Show 4 more filings ↓up to 9d gap

California State AGbd_9e8e5545263fa5ac2025-09-10Verified
Nebraska State AGbd_a1f8a2857021015f2025-09-10Verified
Maine State AGbd_ef390f3e96144bfc2025-09-10Verified
Illinois State AGbd_6e02ae8d033228d52025-09-01 · +9dVerified

Name: Print Media Association
norm: print media
Domain: pmastl.org

Name: Print Media Association
norm: print media
Domain: pmastl.org
Industry: Professional Servicesllm

Discovered: May 5, 2025
Breach occurred: May 1, 2025 – May 5, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: Sep 10, 2025
Notification sent: Sep 10, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Took prompt containment action
Initiated an investigation with the assistance of outside professionals
Conducted a diligent review of documents involved
Notifying individuals whose personal information was identified
Offering complimentary credit monitoring and identity restoration services through Experian
Changes made: Reviewing existing policies and procedures to help reduce the likelihood of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGSep 1 · first

Texas State AG+9d

Massachusetts State AG+9d

Indiana State AG+9d

New Hampshire State AG+9d

California State AG+9d

Nebraska State AG+9d

Maine State AG+9d

Vermont State AG+9d · this page

Pattern: first filing Sep 1 (IL), last Sep 10 (VT) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-09-10-print-media-association-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 10, 2025
Raw hash: d56fa7ba9b23ced0e25fe18d61e765cc98a07fe5b3fb699aa7c52158be2c9e4b

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityPrint Media Association

Victim entityPrint Media Association

Incidentdiscovered May 5, 2025

Stated responseTook prompt containment action

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov