MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

PACIFIC RESIDENTIAL MORTGAGE, LLC

bd_06445fe6fa34d7c8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2025

Filed

Mar 26, 2025

To disclose

6 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

64%

Full breach record for PACIFIC RESIDENTIAL MORTGAGE, LLC →

Pacific Residential Mortgage, LLC experienced a ransomware attack on February 10, 2025, affecting systems until February 20, 2025. Cybercriminals encrypted systems, potentially accessing names, addresses, dates of birth, Social Security numbers, driver's license numbers, and financial account information. The company engaged forensic investigators, recovered systems from backups, notified law enforcement, and is offering 12 months of credit monitoring and fraud assistance to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 44 days

Feb 10, 2025

Begins

Feb 10, 2025

Discovered

Mar 26, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelynxbd_8fece7b4ffb7f5032025-02-09 · +45dVerified by operator
Leak Sitelynxbd_a338732a5d4b98fa2025-02-09 · +45dVerified by operator

Regulatory filings (8) · sorted by filing gap

Washington State AGbd_21f6068d1cc6b4e22025-03-26Verified
Oregon State AGbd_24724886ad0dfb342025-03-26Verified
Massachusetts State AGbd_88594df146bd4ded2025-03-26Verified
Maine State AGbd_8ee1067815fa2ad62025-03-26Verified

Show 4 more filings ↓up to 393d gap

Nebraska State AGbd_37e9f7835075546e2025-03-25 · +1dCandidate
Indiana State AGbd_64f6a47a0aa61adc2025-03-25 · +1dVerified
New Hampshire State AGbd_05f1c076c84b42222025-04-03 · +8dVerified
Maryland State AGbd_0fd90a90441dd7ed2026-04-23 · +393dVerified

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com
Industry: Financial Servicesllm

Discovered: Feb 10, 2025
Breach occurred: Feb 10, 2025 – Feb 20, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Hired a cybersecurity firm to secure our environment and conduct an investigation
Recovered the affected systems from backups
Informed law enforcement of the incident
Providing Single Bureau Credit Monitoring services at no charge for twelve (12) months
Providing proactive fraud assistance through Cyberscout
Changes made: Taken steps to strengthen its security posture to prevent a similar event from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: Leak >30dCA 60-day OK · 43d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 10, 2025
→ Notified: Mar 25, 2025
43d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 10, 2025 → Notified: Mar 25, 2025	43d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGMar 25 · first

Indiana State AGMar 25 · first

Washington State AG+1d

Oregon State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

California State AG+1d · this page

New Hampshire State AG+9d

Maryland State AG+394d

Pattern: first filing Mar 25 (NE), last Apr 23 (MD) — a 394-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-600398
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 26, 2025
Raw hash: 1c04f0a37466778575dddef9de62166e5eca2969e82774cac04752aa86edb374

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Victim entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Incidentdiscovered Feb 10, 2025

Stated responseHired a cybersecurity firm to secure our environment and conduct an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov