The Maine Office of the Attorney General disclosed a data breach affecting New MVT LLC, discovered on December 10, 2024, but reported on February 3, 2025. The incident stemmed from unauthorized network access at a third-party IT provider, compromising the personal data of 1,854 individuals, including 10 Maine residents. While the exact type of exposed data (e.g., financial, PII) was not specified, the breach prompted the company to offer 12 months of identity theft protection services via IDX, suggesting potential risks of fraud or misuse. The reliance on a third-party vendor highlights supply-chain vulnerabilities, though no evidence of ransomware, systemic outages, or broader operational disruption was reported. The response focused on mitigation for affected individuals rather than addressing critical infrastructure or life-threatening consequences.