HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Snap Finance LLC and Snap RTO LLC
bd_0c4abcb3f9cec9b6 · schema v1 · pii pii-v1
Full breach record for Snap Finance LLC and Snap RTO LLC →Snap Finance LLC and Snap RTO LLC experienced unauthorized access to their network environment between June 23, 2022 and September 8, 2022. A third-party forensic investigation determined that an unauthorized actor had the ability to access personal information including names, Social Security numbers, driver's license/state ID numbers, and financial account numbers. The data review was completed on October 28, 2022. Affected individuals were offered 12 months of identity monitoring through Kroll.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_3097908c32ab68eaOregon State AGfiled 2022-12-02Verified
- bd_5e5c7b0416cfda33Maine State AGfiled 2022-12-02Verified
- bd_983b2859ac1811aaMontana State AGfiled 2022-12-02Verified
- bd_e5a5fadab605d3b2Washington State AGfiled 2022-12-02Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-559688
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 2, 2022
- Raw hash
- 239fc928e11a989821c304605b37d16c2b67f1c0e0c7fc2cb502a95924b62d8c
Reporting entity
- Name
- Snap Finance LLC and Snap RTO LLCnorm: snap finance llc and snap rto
Victim entity
- Name
- Snap Finance LLC and Snap RTO LLCnorm: snap finance llc and snap rto
- Industry
- Financial Servicesllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated CollectionT1074 Data Staged
- Threat actor
- External
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.