HackingVulnerability ExploitZero-DayData ExfiltratedTargetedIDENTITY_BASICLowContained
Maritz Holdings Inc.
bd_c572b0fed3fddb00 · schema v1 · pii pii-v1
Full breach record for Maritz Holdings Inc. →Maritz Holdings disclosed a data breach affecting its Oracle E-Business Suite (EBS) environment. An unauthorized third party exploited a previously unknown vulnerability (zero-day) in Oracle EBS to access files between August 10-13, 2025. The incident involved the exfiltration of personal information, including names. Maritz engaged cybersecurity experts and notified law enforcement, offering 24 months of credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 105 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_438cba26c14312fdLeak Sitecl0pfiled 2025-11-13(105d gap)Candidate
Regulatory filings (5) · sorted by filing gap
- bd_4a5a64bea2308189California State AGfiled 2026-02-27Verified
- bd_511e8774e8b05d7cIndiana State AGfiled 2026-02-27Verified by operator
- bd_e6494ae402d92dcdMaine State AGfiled 2026-02-27Verified
- bd_d6f87f82bc65a8ebCalifornia State AGfiled 2026-04-03(35d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 38d gap
- bd_19465167e1507b6bTexas State AGfiled 2026-04-06(38d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-27-maritz-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2026
- Raw hash
- f5bf044d00a8c8305b208a5ccb0c80177a16e8422d046ffbb9c928f8812ae191
Reporting entity
- Name
- Maritz Holdings Inc.norm: maritz holdings
- Domain
- maritz.com
Victim entity
- Name
- Maritz Holdings Inc.norm: maritz holdings
- Domain
- maritz.com
Incident
- Discovered
- Nov 1, 2025
- Materiality determined
- Feb 27, 2026
- Notification sent
- Feb 27, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- notified law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(118 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.