HackingFinancial ServicesFinanceCustomer Data InvolvedFinancial accountFinancial credentialsMediumContained

ON DECK CAPITAL, INC.

bd_0f741100678b3176 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 17, 2022

Filed

Jun 3, 2022

To disclose

17 days

Affected · nationwide

60,307219 in this filing

Linked

7 filings

Confidence

50%

Full breach record for ON DECK CAPITAL, INC. →2 incidents on file

On Deck Capital, Inc. reported a data breach affecting 60,307 individuals, including 219 Maine residents. The breach, which occurred on March 10, 2022, was an external system breach (hacking) discovered on May 17, 2022. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. Affected individuals were notified on June 2, 2022, and offered a complimentary 24-month subscription to an identity protection service.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 17, 2022 → Filed with AG Jun 3, 202217d ✓ ME AG ≤30d17 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 68 days

discovery → filing · 17 days

Mar 10, 2022

Begins

May 17, 2022

Discovered

Jun 3, 2022

Filed

vs. sector median

7 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_2438a8a7488ecb792022-06-03Verified
Montana State AGbd_4c76f7c6121633d92022-06-03Verified
California State AGbd_5174f877f9b1f2d62022-06-03Verified
Washington State AGbd_6de064587d52a8362022-06-03Verified

Show 2 more filings ↓up to 1d gap

Oregon State AGbd_da3140a54da72e3f2022-06-03Verified
Indiana State AGbd_95fdf2fd3bbad81d2022-06-02 · +1dVerified

Name: ON DECK CAPITAL, INC.
norm: on deck

Name: ON DECK CAPITAL, INC.
norm: on deck
Industry: Financial Servicesllm

Discovered: May 17, 2022
Breach occurred: Mar 10, 2022
Undetected for: 68 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 2, 2022
Affected individuals: 60,307state + nationwide
Data types: Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access

Changes made: Offered 24 months of identity protection services from Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: ME AG ≤30d · 17d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 17, 2022
→ Filed with AG: Jun 3, 2022
17d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 17, 2022 → Filed with AG: Jun 3, 2022	17d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGJun 2 · first

Massachusetts State AG+1d

Montana State AG+1d

California State AG+1d

Washington State AG+1d

Oregon State AG+1d

Maine State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8b48ae05-8549-478a-9672-eb89d4eb08d8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 3, 2022
Raw hash: 7687835c4b30207874ea1784b1f53eda533ad7144c76bc45abe4beb80ac2c9e0

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityON DECK CAPITAL, INC.

Victim entityON DECK CAPITAL, INC.

Incidentdiscovered May 17, 2022

Stated responseOffered 24 months of identity protection services from Experian IdentityWorks

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov