MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

PACIFIC RESIDENTIAL MORTGAGE, LLC

bd_0fd90a90441dd7ed · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2025

Filed

Apr 23, 2026

To disclose

—

Affected

7state residents only

Linked

11 filings

Confidence

67%

Full breach record for PACIFIC RESIDENTIAL MORTGAGE, LLC →

Pacific Residential Mortgage, LLC reported a ransomware incident to the Maryland Attorney General on March 25, 2025. The company detected the ransomware lockdown on February 10, 2025. The breach impacted 7 Maryland residents, exposing names, addresses, SSNs, driver's license numbers, and financial account information. Pac Res engaged a cybersecurity firm, recovered systems from backups, notified law enforcement, and provided 12 months of credit monitoring via TransUnion/Cyberscout.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Feb 10, 2025

Discovered

Apr 23, 2026

Filed

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelynxbd_8fece7b4ffb7f5032025-02-09 · +438dVerified by operator
Leak Sitelynxbd_a338732a5d4b98fa2025-02-09 · +438dVerified by operator

Regulatory filings (8) · sorted by filing gap

New Hampshire State AGbd_05f1c076c84b42222025-04-03 · +385dVerified
California State AGbd_06445fe6fa34d7c82025-03-26 · +393dVerified
Washington State AGbd_21f6068d1cc6b4e22025-03-26 · +393dVerified
Oregon State AGbd_24724886ad0dfb342025-03-26 · +393dVerified

Show 4 more filings ↓up to 394d gap

Massachusetts State AGbd_88594df146bd4ded2025-03-26 · +393dVerified
Maine State AGbd_8ee1067815fa2ad62025-03-26 · +393dVerified
Nebraska State AGbd_37e9f7835075546e2025-03-25 · +394dCandidate
Indiana State AGbd_64f6a47a0aa61adc2025-03-25 · +394dVerified

Name: TAFT STETTINIUS & HOLLISTER LLP
norm: taft stettinius hollister

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com
Industry: financial_services
Industry: Financial Servicesllm

Discovered: Feb 10, 2025
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: providing written notice of this incident to relevant state regulators

During the incident: Hired a cybersecurity firm to secure its environment and conduct an investigation
Recovered the affected systems from backups
Informed law enforcement of the incident
Commenced notifying impacted customers and employees
Providing written notice of this incident to relevant state regulators
Providing written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Implemented several changes to its information security practices and its written policies and procedures
Working to implement additional safeguards and improvements to its existing employee training and awareness efforts
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing individuals with information on how to obtain a free credit report
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGMar 25 · first

Indiana State AGMar 25 · first

California State AG+1d

Washington State AG+1d

Oregon State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+9d

Maryland State AG+394d · this page

Pattern: first filing Mar 25 (NE), last Apr 23 (MD) — a 394-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376756.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 052979c15e2b9309ea459978b5f8481b304b0d281db454c114934d4026a674f3

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityTAFT STETTINIUS & HOLLISTER LLP

Victim entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Incidentdiscovered Feb 10, 2025

Stated responseHired a cybersecurity firm to secure its environment and conduct an investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov