Mana Products, Inc. is currently addressing a data event that was detected on approximately September 2, 2023. Following the emergence of suspicious activity on its systems, the company took immediate action to secure its network and commenced a thorough investigation into the matter.
"The investigation determined that between September 2, 2023 and September 4, 2023, an unauthorized actor gained access to Mana’s computer network," stated a spokesperson from the company. The breach involved a limited set of files that were potentially accessed or acquired by an unknown third party without authorization.
"The investigation determined that between September 2, 2023 and September 4, 2023, an unauthorized actor gained access to Mana’s computer network,"
The company initiated a comprehensive review of its systems to assess the impact of this incident. "On March 6, 2023, Mana determined that certain information related to certain individuals was stored on the impacted systems," the spokesperson revealed. This potentially compromised information includes personal identifiers such as names, Social Security numbers, and financial account details.
"On March 6, 2023, Mana determined that certain information related to certain individuals was stored on the impacted systems,"
Mana began notifying affected individuals about the incident on or around April 29, 2024, providing written notices to eight Massachusetts residents. These communications were designed to contain critical information regarding the event and its implications for personal security.
In response to the incident, Mana has taken significant measures to strengthen its cybersecurity protocols. "Upon discovering the event, Mana moved quickly to investigate and respond to the incident, assess the security of Mana systems, and identify potentially affected individuals," the spokesperson explained. Furthermore, federal law enforcement has been informed of the breach.
"Upon discovering the event, Mana moved quickly to investigate and respond to the incident, assess the security of Mana systems, and identify potentially affected individuals,"
Impact and Legacy
As part of its ongoing response strategy, Mana is not only implementing enhanced security safeguards but is also providing affected individuals with access to credit monitoring services for 24 months at no cost through Experian. This service aims to assist those whose personal information may have been impacted by the breach.
Impact and Legacy
"In addition, we are providing impacted individuals with guidance on how to better protect against identity theft and fraud," the spokesperson added. This includes advice on how to place a fraud alert or security freeze on one’s credit file, as well as contact information for national consumer reporting agencies. Individuals are also encouraged to remain vigilant against fraud and identity theft by reviewing account statements and monitoring their credit reports.
"In addition, we are providing impacted individuals with guidance on how to better protect against identity theft and fraud,"
The company is committed to transparently addressing this issue and is providing written notice to relevant state regulators as necessary. It follows Massachusetts General Law, which emphasizes the importance of maintaining a written information security program (WISP) for protecting personal information of state residents.
Looking Ahead
As the investigation continues, Mana Products is dedicated to preserving the rights of its customers while taking every precaution to prevent future data breaches and ensure the security of personal information. The company remains focused on learning from this incident and improving its systems to safeguard against potential threats in the future.
