MalwareFinancial ServicesFinanceRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

SN Servicing Corporation

bd_0424e3f59662bb0d · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2020

Filed

Jan 29, 2021

To disclose

15 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

65%

Full breach record for SN Servicing Corporation →2 incidents on file

SN Servicing Corporation experienced a ransomware attack on October 15, 2020. The incident resulted in the exposure of personal information for some borrowers, including names, addresses, loan numbers, and billing information from March 2018 statements. The company locked down systems, engaged forensic experts, and notified authorities. Affected individuals were offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d15 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 15 weeks / 106 days

Oct 14, 2020

Begins

Oct 15, 2020

Discovered

Jan 29, 2021

Filed

vs. sector median

+7 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteegregorbd_4bc6fb5649261ccf2020-10-15 · +106dVerified

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_62f5a428547a502d2021-01-15 · +14dVerified by operator
New Hampshire State AGMount Lockerbd_b8759a76ab97511d2021-01-15 · +14dVerified by operator
Indiana State AGbd_c6e80a15fece44ed2021-01-15 · +14dVerified by operator
Illinois State AGbd_225df64f9dbda7ba2021-01-01 · +28dVerified by operator

Show 4 more filings ↓up to 178d gap

Maine State AGbd_376b6357c22f175f2021-07-16 · +168dVerified
Oregon State AGbd_d479dd57d0545f1f2021-07-16 · +168dVerified
California State AGbd_d772c960f49e9ed82021-07-16 · +168dVerified
South Carolina State AGbd_7b8b73c450e5945f2021-07-26 · +178dVerified

Name: SN Servicing Corporation
norm: sn servicing

Name: SN Servicing Corporation
norm: sn servicing
Industry: Financial Servicesllm

Discovered: Oct 15, 2020
Breach occurred: Oct 14, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Locked down affected systems
Engaged a third-party team of forensics experts
Notified the appropriate authorities
Changes made: Replacing email filtering tools, malware software, and Internet monitoring tools with more robust solutions that utilize artificial intelligence (AI) to detect and block known and newly introduced malware
Blocking all inbound and outbound internet, email, and network traffic to foreign countries
Upgrading infrastructure to improve backup and recovery efforts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+14d

New Hampshire State AG+14d

Indiana State AG+14d

California State AG+28d · this page

Maine State AG+196d

Oregon State AG+196d

California State AG+196d

South Carolina State AG+206d

Pattern: first filing Jan 1 (IL), last Jul 26 (SC) — a 206-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-537602
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 29, 2021
Raw hash: fe42655b629e32574a88e592c367f3189c5f502afd31cc6f785195dcda7bb0f7

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entitySN Servicing Corporation

Victim entitySN Servicing Corporation

Incidentdiscovered Oct 15, 2020

Stated responseLocked down affected systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov