New MVT LLC

The Maine Office of the Attorney General disclosed a data breach affecting New MVT LLC, discovered on December 10, 2024, but reported on February 3, 2025. The incident stemmed from unauthorized network access at a third-party IT provider, compromising the personal data of 1,854 individuals, including 10 Maine residents. While the exact type of exposed data (e.g., financial, PII) was not specified, the breach prompted the company to offer 12 months of identity theft protection services via IDX, suggesting potential risks of fraud or misuse. The reliance on a third-party vendor highlights supply-chain vulnerabilities, though no evidence of ransomware, systemic outages, or broader operational disruption was reported. The response focused on mitigation for affected individuals rather than addressing critical infrastructure or life-threatening consequences.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bc623de6-5c77-465a-b19d-0111892f5084.html

TPRM report: https://www.rankiteo.com/company/mvts

"id": "mvt731082025",
"linkid": "mvts",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1854,
                        'name': 'New MVT LLC',
                        'type': 'Business'},
                       {'industry': 'IT Services',
                        'name': 'Third-Party IT Provider (Unnamed)',
                        'type': 'Service Provider'}],
 'attack_vector': 'Unauthorized Access (Third-Party IT Provider)',
 'customer_advisories': 'Identity theft protection services (IDX) offered for '
                        '12 months',
 'data_breach': {'number_of_records_exposed': 1854,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (PII)',
                 'type_of_data_compromised': 'Personally Identifiable '
                                             'Information (PII)'},
 'date_detected': '2024-12-10',
 'date_publicly_disclosed': '2025-02-03',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving New MVT LLC, discovered on December 10, '
                '2024. The breach was due to unauthorized access on the '
                'network of a third-party IT provider, affecting 1,854 '
                'individuals, including 10 residents of Maine. Identity theft '
                'protection services (IDX) were offered for 12 months to '
                'affected individuals.',
 'impact': {'brand_reputation_impact': 'Potential (due to public disclosure)',
            'data_compromised': True,
            'identity_theft_risk': 'High (identity theft protection services '
                                   'offered)'},
 'references': [{'date_accessed': '2025-02-03',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Attorney '
                                        'General; identity theft protection '
                                        'offered',
              'third_party_assistance': 'Identity Theft Protection (IDX)'},
 'title': 'Data Breach at New MVT LLC via Third-Party IT Provider',
 'type': 'Data Breach'}