Mana Products Inc.

In September 2023, Mana Products Inc. suffered a targeted cyberattack that exposed sensitive personal information, including names and Social Security numbers, to unauthorized third parties. The breach led to a class action lawsuit, alleging the company failed to adequately protect customer data. Affected individuals those who received breach notices and resided in the U.S. at the time became eligible for compensation, including reimbursements for out-of-pocket expenses (up to $400), lost time ($20/hour for up to 4 hours), extraordinary fraud-related costs (up to $4,000), or a one-time $25 cash payment. The settlement also provided two years of credit monitoring with $1M identity theft insurance. The total cash benefit pool was capped at $200,000, with pro rata reductions if claims exceeded the fund. The breach’s fallout included potential identity theft, financial fraud, and reputational harm, though no evidence suggested systemic misuse of the exposed data beyond the initial compromise.

Source: https://www.claimdepot.com/settlements/mana-products-settlement

TPRM report: https://www.rankiteo.com/company/mana-products

"id": "man5632056091325",
"linkid": "mana-products",
"type": "Cyber Attack",
"date": "9/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Class members (U.S. residents '
                                              'notified of the breach)',
                        'name': 'Mana Products Inc.',
                        'type': 'Company'}],
 'customer_advisories': ['Credit monitoring enrollment',
                         'Claim submission instructions (online/mail)',
                         'Support for lost time and extraordinary expenses '
                         'documentation'],
 'data_breach': {'data_exfiltration': 'Yes (exposed to unauthorized third '
                                      'parties)',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (includes Social Security '
                                        'Numbers)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2023-09-02',
 'description': 'A targeted cyberattack on Mana Products Inc. in September '
                '2023 exposed sensitive personal information, including names '
                'and Social Security numbers, to unauthorized third parties. '
                'The company agreed to settle a class action lawsuit, offering '
                'affected individuals reimbursement for expenses, credit '
                'monitoring, and cash payments.',
 'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement',
            'data_compromised': ['Names', 'Social Security Numbers'],
            'financial_loss': {'administration_costs': 'To be determined',
                               'attorneys_fees': 'Up to $120,000',
                               'credit_monitoring_costs': 'Determined by '
                                                          'number of valid '
                                                          'claims',
                               'service_award': 'Up to $5,000',
                               'settlement_fund': '$200,000 (cash benefits)'},
            'identity_theft_risk': 'High (documented fraud/identity theft '
                                   'cases eligible for up to $4,000 '
                                   'reimbursement)',
            'legal_liabilities': 'Class action lawsuit settled'},
 'investigation_status': 'Settled (class action lawsuit)',
 'post_incident_analysis': {'corrective_actions': ['Settlement agreement with '
                                                   'financial compensation and '
                                                   'credit monitoring',
                                                   'Denial of wrongdoing but '
                                                   'agreement to avoid '
                                                   'litigation costs'],
                            'root_causes': ['Alleged failure to adequately '
                                            'protect personal information']},
 'references': [{'source': 'Mana Products Inc. Data Security Incident '
                           'Settlement'},
                {'source': 'Settlement Administrator Contact',
                 'url': 'mailto:[email protected]'},
                {'source': 'Settlement Claim Website'}],
 'regulatory_compliance': {'legal_actions': ['Class action lawsuit (settled)']},
 'response': {'communication_strategy': ['Notice letters to affected '
                                         'individuals',
                                         'Settlement website and claim forms '
                                         '(online/mail)',
                                         'Customer support via phone/email'],
              'recovery_measures': ['Reimbursement for out-of-pocket expenses '
                                    '(up to $400)',
                                    'Lost time compensation ($20/hour, max '
                                    '$80)',
                                    'Extraordinary expenses reimbursement (up '
                                    'to $4,000)',
                                    'Alternative $25 cash payment',
                                    'Two years of credit monitoring with $1M '
                                    'identity theft insurance'],
              'remediation_measures': ['Settlement agreement',
                                       'Credit monitoring services']},
 'stakeholder_advisories': ['Settlement notices sent to affected individuals',
                            'Public claim submission process'],
 'title': 'Mana Products Inc. Data Breach (September 2023)',
 'type': ['Data Breach', 'Cyberattack']}