HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained

Mana Products, Inc.

bd_ac6328c048dbb2e6 · schema v1 · pii pii-v1

Full breach record for Mana Products, Inc. →

Mana Products, Inc. notified New Hampshire residents on April 29, 2024, of a security incident detected on September 2, 2023. An unauthorized actor accessed the network between September 2 and 4, 2023, potentially accessing a limited number of files containing names and other personal information. Mana notified federal law enforcement, implemented additional safeguards, and offered credit monitoring through Experian to the 3 identified affected individuals.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_1a37bac2ce6953f8Maine State AGfiled 2024-04-29Candidate
bd_bbaefbddecb27922Indiana State AGfiled 2024-04-29Verified

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mana-products-20240429.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2024
Raw hash: ef66370a40584d3a9ecfe3b11107fbf171a5b07469094fe8dd62ef9fcab2c254

Reporting entity

Name: Mana Products, Inc.
norm: mana products

Victim entity

Name: Mana Products, Inc.
norm: mana products

Incident

Discovered: Sep 2, 2023
Materiality determined: —
Notification sent: Apr 29, 2024
Affected individuals: 3
Data types: IDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators
Initial access: exploit_public_facing

Compliance

Time to disclose: 34 weeks(240 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.