HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICLowContained
New MVT LLC
bd_c4f3071b0040c459 · schema v1 · pii pii-v1
Full breach record for New MVT LLC →New MVT LLC notified consumers of a data breach involving its third-party IT provider. Unauthorized activity was discovered on July 23, 2024, affecting customer names and additional data elements. New MVT engaged forensic specialists, strengthened network security, and offered complimentary credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2f4d7db2899fff24Indiana State AGfiled 2025-02-03Verified
- bd_4834a1cbc0d065edMaryland State AGfiled 2025-02-03Candidate
- bd_4d279114b7810687Maine State AGfiled 2025-02-03Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-03-new-mvt-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- ffdc77c2264aeec63f82630b52c57e8765a4ed946930751dc00f2e9c2a7a1d50
Reporting entity
- Name
- New MVT LLCnorm: new mvt
Victim entity
- Name
- New MVT LLCnorm: new mvt
Incident
- Discovered
- Jul 23, 2024
- Materiality determined
- —
- Notification sent
- Feb 3, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 28 weeks(195 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.