HackingData ExfiltratedIDENTITY_BASICLowContained
MPB Property, LLC
bd_bb3abf609c31e65f · schema v1 · pii pii-v1
Full breach record for MPB Property, LLC →MPB Property, LLC, owner of the Eau Palm Beach Resort and Spa, notified Massachusetts residents of a security incident where an unauthorized actor accessed the network between September 7 and 10, 2025. The investigation determined that personal information, including names and potentially other identifiers, was exfiltrated. No identity theft or financial fraud has been confirmed. MPB is offering complimentary credit monitoring via Experian IdentityWorks.
Massachusetts clock✗ MA AG >90d34 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 723 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1ca6911bdfec9a01Indiana State AGfiled 2026-05-22(21d gap)Verified
- bd_50395d03e108497aMaine State AGfiled 2026-05-27(26d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-856-mpb-property-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 17973313597250b9b6c016869ab7920c22ea8e2c2ea5d12bad3c9a84046d64a0
Reporting entity
- Name
- MPB Property, LLCnorm: mpb property
Victim entity
- Name
- MPB Property, LLCnorm: mpb property
Incident
- Discovered
- Sep 7, 2025
- Materiality determined
- Apr 23, 2026
- Notification sent
- May 21, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 34 weeks(236 days from discovery to filing)
- Compliance flags
- MA AG >90dLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.