HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Mann Lake Acquisition, Inc.
bd_88f4984a8dace13d · schema v1 · pii pii-v1
Full breach record for Mann Lake Acquisition, Inc. →Mann Lake Acquisition, Inc. notified consumers of a data breach affecting purchases made on its websites between March 14 and March 27, 2025. An unknown actor potentially accessed names and payment card information. Mann Lake secured its network, engaged regulators, and offered 12 months of credit monitoring to affected individuals.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_05fa25ea53c7a0e4New Hampshire State AGfiled 2025-05-09Verified
- bd_433f7ed32839b51eMontana State AGfiled 2025-05-09Candidate
- bd_bba84467830d9098Indiana State AGfiled 2025-05-09Verified
- bd_e24241ed9076b230Maine State AGfiled 2025-05-09Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-09-mann-lake-acquisition-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2025
- Raw hash
- 2ca4f29005c48af6402c59015f3ebdd568aa6a5e5168a51e83e8c970e65f57b3
Reporting entity
- Name
- Mann Lake Acquisition, Inc.norm: mann lake acquisition
- Domain
- mannlakeltd.com
Victim entity
- Name
- Mann Lake Acquisition, Inc.norm: mann lake acquisition
- Domain
- mannlakeltd.com
Incident
- Discovered
- Mar 17, 2025
- Materiality determined
- —
- Notification sent
- May 9, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this event to appropriate privacy regulators where required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.