MTG USA, Inc.
ent_0119829721015d18b6726678
Disclosures
6
State AG · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
4,270
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- MTG USA, Inc.
- Normalized
- mtg usa— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- mtg-usa.com
Disclosure history (6)newest first
- New Hampshire State AGas victim2021-10-08
MTG USA, Inc. notified the New Hampshire Attorney General of a data breach affecting 3 state residents. Malicious code on the company website captured payment card information between June 25, 2020, and June 15, 2021. The company engaged a PCI Forensic Investigator, shut down the site, and migrated to Shopify. Affected individuals received 24 months of identity theft protection.
- Massachusetts State AGas victim2021-10-05
MTG USA, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-10-05. 118 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2021-09-26
MTG USA, Inc. reported a data security incident on its website www.ReFaUSA.com occurring between June 25, 2020, and June 15, 2021. The breach potentially exposed payment card information, names, and addresses. MTG suspended transactions, moved the server offline, and engaged forensic specialists. No evidence of misuse was found, but the company offered two years of Experian IdentityWorks to affected individuals.
- Maine State AGas victim2021-09-22
MTG USA, Inc. experienced a prolonged external system breach from June 25, 2020, to June 15, 2021, which was discovered on September 9, 2021. The breach affected 3 Maine residents, compromising names and financial account information, including credit/debit card numbers with their security codes. In response, the company provided written notifications on September 16, 2021, and offered 24 months of identity theft protection services.
- Montana State AGas victim2021-09-21
MTG USA, Inc. notified customers of a data security incident on its website ReFaUSA.com. Unauthorized access occurred between June 25, 2020, and June 15, 2021. The incident potentially exposed payment card information, names, and addresses. MTG suspended transactions, moved the server offline, engaged forensic specialists, and reported the incident to law enforcement. Affected individuals were offered two years of Experian IdentityWorks.
- Indiana State AGas victim2021-09-10
MTG USA Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-06-25 and was reported on 2021-09-10. 22 Indiana residents were affected. 4,270 individuals affected in total.