HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDPIIMediumContained

Community Loan Servicing

bd_12b6867755eea3a1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2021

Filed

Aug 19, 2022

To disclose

37 weeks

Affected

828state residents only

Linked

9 filings

Confidence

65%

Full breach record for Community Loan Servicing →

Community Loan Servicing LLC experienced unauthorized access to file servers containing names and Social Security numbers between October 27 and December 7, 2021. The incident was discovered in early December 2021. The company engaged Kroll to provide one year of complimentary identity monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 35 days

discovery → filing · 37 weeks / 261 days

Oct 27, 2021

Begins

Dec 1, 2021

Discovered

Aug 19, 2022

Filed

vs. sector median

+28 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_51a97163a481ccc72022-08-19Verified
Oregon State AGbd_638d85ff9c9775f82022-08-19Verified by operator
Delaware State AGbd_88940eaf560a23b82022-08-19Verified
California State AGbd_bd7781afa1180b0c2022-08-19Verified

Show 4 more filings ↓up to 111d gap

Indiana State AGbd_dccd45162c8032902022-08-19Verified
Washington State AGbd_fad7aa2f9c7e8e862022-08-19Verified
South Carolina State AGbd_6fff1c6f3c4a8d122022-08-22 · +3dVerified
Hawaii State AGbd_6f2b352957b1f50f2022-12-08 · +111dVerified

Name: Community Loan Servicing
norm: community loan servicing

Name: Community Loan Servicing
norm: community loan servicing
Industry: Financial Servicesllm

Discovered: Dec 1, 2021
Breach occurred: Oct 27, 2021 – Dec 7, 2021
Undetected for: 35 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 828state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notify law enforcement
Initial access: valid_credentials

During the incident: Steps were immediately taken to contain the incident
Notify law enforcement
A forensic investigation firm was engaged
The investigation determined that an unauthorized person obtained access
The accessed files were then reviewed by our investigation team
Engaged Kroll, a third party with monitoring expertise, to provide identity monitoring services
Changes made: Additional steps are being taken to further enhance our existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(261 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGAug 19 · first

Oregon State AGAug 19 · first

Delaware State AGAug 19 · first

California State AGAug 19 · first

Indiana State AGAug 19 · first

Washington State AGAug 19 · first

Montana State AGAug 19 · first · this page

South Carolina State AG+3d

Hawaii State AG+111d

Pattern: first filing Aug 19 (MA), last Dec 8 (HI) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-510.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2022
Raw hash: a6e9a4ed45090ba0ac9525b8453a7b340c5b3272ff8e59d5b1a9f936b4e852e8

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityCommunity Loan Servicing

Victim entityCommunity Loan Servicing

Incidentdiscovered Dec 1, 2021

Stated responseSteps were immediately taken to contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov