HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsMedium

Apex Home Loans Inc

bd_04769c9277340d4d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 28, 2022

Filed

Feb 9, 2022

To disclose

12 days

Affected · nationwide

2,2671 in this filing

Linked

2 filings

Confidence

65%

Full breach record for Apex Home Loans Inc →

Apex Home Loans, a financial services company, reported a data breach affecting 2,267 individuals. The breach, which occurred between May 11, 2021, and July 30, 2021, was discovered on January 28, 2022. The incident was described as an external system breach (hacking), resulting in the compromise of names and financial account numbers with their associated access codes or PINs. Affected individuals were notified on February 9, 2022, and offered 12 months of credit monitoring and identity restoration services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 28, 2022 → Filed with AG Feb 9, 202212d ✓ ME AG ≤30d12 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 262 days

discovery → filing · 12 days

May 11, 2021

Begins

Jan 28, 2022

Discovered

Feb 9, 2022

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_5f76bafb3887e0b22022-02-09Verified by operator

Name: Apex Home Loans Inc
norm: apex home loans

Name: Apex Home Loans Inc
norm: apex home loans
Industry: Financial Servicesllm

Discovered: Jan 28, 2022
Breach occurred: May 11, 2021 – Jul 30, 2021
Undetected for: 262 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2022
Affected individuals: 2,267state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Sent written notification to affected consumers
Changes made: Offered 12 months of credit monitoring and identity restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: ME AG ≤30d · 12d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 28, 2022
→ Filed with AG: Feb 9, 2022
12d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 28, 2022 → Filed with AG: Feb 9, 2022	12d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGFeb 9 · first

Maine State AGFeb 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f03620ce-9a67-45e4-9592-c227c22c941e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2022
Raw hash: e0e7a5c3428dc3912ebc7eb0b8d99966db0562eeea74551bd3a554c7f8e21075

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityApex Home Loans Inc

Victim entityApex Home Loans Inc

Incidentdiscovered Jan 28, 2022

Stated responseSent written notification to affected consumers

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov