Almeida Law Group is investigating a data breach at MPB Property LLC. The breach occurred on September 7, 2025, and was discovered on April 23, 2026. If you were affected, contact Almeida Law Group.
About MPB Property LLC
MPB Property LLC is the owner of the Eau Palm Beach Resort & Spa, a Forbes Five-Star luxury oceanfront resort located in Manalapan, Florida. The 310-room property sits on seven acres of oceanfront and was formerly a Ritz-Carlton before being rebranded in 2013. It was acquired in August 2024 for $277.4 million by a company affiliated with billionaire Larry Ellison.
What Happened?
MPB Property LLC was listed in a Maine Attorney General filing reporting an external system breach — specifically, a hacking incident. According to the breach notification letter, unusual activity was detected in the resort’s network on September 10, 2025, and an investigation determined that certain files were likely taken by an unauthorized actor between September 7 and September 10, 2025. MPB Property did not determine that personal information was involved until April 23, 2026 — more than seven months after the breach window. Consumer notification letters were sent on May 22, 2026. A total of 2,042 individuals were affected.
The compromised information included first and last names combined with at least one additional personal identifier. The breach notification letter uses an unfilled template variable for the specific secondary data type, so the exact nature of that additional information was not disclosed in the public filing.
The Play ransomware group claimed responsibility for the attack. Multiple independent ransomware tracking sources attributed the incident to Play and reported an estimated attack date of September 9, 2025, consistent with the breach window identified in the Maine filing. Twelve months of complimentary identity protection and credit monitoring through Experian were offered to affected individuals.
Key Facts at a Glance
- Company or Organization: MPB Property LLC (Eau Palm Beach Resort & Spa)
- Industry: Hospitality and Tourism (luxury resort and spa)
- Location: 100 South Ocean Boulevard, Manalapan, FL 33462
- Incident type: External system breach (hacking); Play ransomware group claimed responsibility
- Date of breach: September 7, 2025
- Date breach discovered: April 23, 2026
- Date of consumer notification: May 22, 2026
- Total persons affected: 2,042
- Identity theft protection offered: Yes — Experian IdentityWorks, 12 months
- Source: Maine Attorney General Filing; Play ransomware attribution; Ransomware.live activity listing
What Should You Do?
If you received a notification from MPB Property LLC, enroll in the complimentary Experian IdentityWorks credit monitoring and identity protection service before the enrollment deadline stated in your notice. You should also consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Review your credit reports regularly through AnnualCreditReport.com and watch your financial accounts closely for any unfamiliar activity. If you believe your information has been misused, visit IdentityTheft.gov for step-by-step guidance on what to do next.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
