HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICCREDENTIALSFINANCIAL_ACCOUNTLowContained
Manhattan Prep
bd_a5faa02d114a6a68 · schema v1 · pii pii-v1
Full breach record for Manhattan Prep →Manhattan Prep notified customers of a security breach on March 25, 2012, where an unauthorized third party temporarily penetrated their system. The breach exposed personal information including names, addresses, emails, birth dates, usernames, passwords, phone numbers, and credit card details. Manhattan Prep engaged data security experts and law enforcement, removed stored credit card data, and reset passwords. They are reviewing security procedures and modifying technical infrastructure.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-22876
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2012
- Raw hash
- 3df4841a24126e952d5f82bdd04f32a055a3429d698a3b96ca14bd3afdf4dd09
Reporting entity
- Name
- Manhattan Prepnorm: manhattan prep
- Domain
- manhattangmat.com
Victim entity
- Name
- Manhattan Prepnorm: manhattan prep
- Domain
- manhattangmat.com
Incident
- Discovered
- Mar 25, 2012
- Materiality determined
- —
- Notification sent
- Mar 23, 2012
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALSFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Working with law enforcement
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.