HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedCREDENTIALSIDENTITY_BASICLowContained
MHNext
bd_da2771da37f7d4fb · schema v1 · pii pii-v1
Full breach record for MHNext →On March 2, 2021, Manhunt (operated by MHNext, LLC) discovered an attacker gained access to a database storing user credentials. The attacker downloaded usernames, email addresses, and passwords for a subset of users. Manhunt contained the intrusion, reset affected passwords, and engaged a third-party forensics consultant. No payment card or profile information was exposed.
California clockDiscovered Mar 2, 2021 → Notified Mar 17, 202115d ✓ CA 60-day OK4 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539662
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2021
- Raw hash
- 4269767fef35154a58d1dee763e9c46c52dc03f2abc52c36d30bc6cb76ec45fa
Reporting entity
- Name
- MHNextnorm: mhnext
- Domain
- mhnext.com
Victim entity
- Name
- MHNextnorm: mhnext
- Domain
- mhnext.com
Incident
- Discovered
- Mar 2, 2021
- Materiality determined
- —
- Notification sent
- Mar 17, 2021
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 15d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 2, 2021→ Notified: Mar 17, 202115d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.