MalwareFinancial ServicesFinanceRansomwareData EncryptedTargetedIdentity (basic)Government IDMediumContained

PACIFIC RESIDENTIAL MORTGAGE, LLC

bd_05f1c076c84b4222 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2025

Filed

Apr 3, 2025

To disclose

7 weeks

Affected

2state residents only

Linked

11 filings

Confidence

66%

Full breach record for PACIFIC RESIDENTIAL MORTGAGE, LLC →

Pacific Residential Mortgage, LLC reported a ransomware incident detected on Feb 10, 2025. The breach impacted 2 New Hampshire residents, exposing personal information including government IDs. Pac Res engaged forensic investigators, recovered systems from backups, notified law enforcement, and offered credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 52 days

Feb 10, 2025

Discovered

Apr 3, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 11 about the same incident.View merged incident

A leak claim by lynx about this victim predates this filing by 53 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelynxbd_8fece7b4ffb7f5032025-02-09 · +53dVerified by operator
Leak Sitelynxbd_a338732a5d4b98fa2025-02-09 · +53dVerified by operator

Regulatory filings (8) · sorted by filing gap

California State AGbd_06445fe6fa34d7c82025-03-26 · +8dVerified
Washington State AGbd_21f6068d1cc6b4e22025-03-26 · +8dVerified
Oregon State AGbd_24724886ad0dfb342025-03-26 · +8dVerified
Massachusetts State AGbd_88594df146bd4ded2025-03-26 · +8dVerified

Show 4 more filings ↓up to 385d gap

Maine State AGbd_8ee1067815fa2ad62025-03-26 · +8dVerified
Nebraska State AGbd_37e9f7835075546e2025-03-25 · +9dCandidate
Indiana State AGbd_64f6a47a0aa61adc2025-03-25 · +9dVerified
Maryland State AGbd_0fd90a90441dd7ed2026-04-23 · +385dVerified

Name: Taft Law Firm (Mehmet Munur)
norm: taft law firm mehmet munur

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com
Industry: Financial Servicesllm

Discovered: Feb 10, 2025
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney GeneralNotified Equifax, Experian, and TransUnion

During the incident: Hired a cybersecurity firm to secure its environment and conduct an investigation
Recovered the affected systems from backups
Informed law enforcement of the incident
Commenced notifying impacted customers and employees
Provided written notice to relevant state regulators and the three major credit reporting agencies
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implemented several changes to its information security practices and its written policies and procedures
Working to implement additional safeguards and improvements to its existing employee training and awareness efforts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGMar 25 · first

Indiana State AGMar 25 · first

California State AG+1d

Washington State AG+1d

Oregon State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+9d · this page

Maryland State AG+394d

Pattern: first filing Mar 25 (NE), last Apr 23 (MD) — a 394-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pacific-residential-mortgage-20250403.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2025
Raw hash: a02e348c3d8f1b3acf26f03aa82bc006b57f4f7aae4c94cd30502cd8c8b886e3

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityTaft Law Firm (Mehmet Munur)

Victim entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Incidentdiscovered Feb 10, 2025

Stated responseHired a cybersecurity firm to secure its environment and conduct an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov