HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
Fundera Inc.
bd_1472ab6e53d4eba1 · schema v1 · pii pii-v1
Full breach record for Fundera Inc. →Fundera, Inc. notified consumers of a data security incident discovered on January 25, 2024, where an unidentified party gained unauthorized access to personal information submitted during commercial loan applications. Affected data included names, SSNs, DOBs, and driver's licenses. Fundera disabled access, enhanced security controls, and offered 24 months of credit monitoring.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_286d9fb65a5bd7b8Indiana State AGfiled 2024-05-06Verified
- bd_b1fdfc8aae679f64Maine State AGfiled 2024-05-06Candidate
- bd_ea19c530de84413aMontana State AGfiled 2024-05-06Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-06-fundera-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2024
- Raw hash
- 114b23610f695eca9eb18bcec6d6457f1e684af65c9417e8b8650d11ac948417
Reporting entity
- Name
- Fundera Inc.norm: fundera
Victim entity
- Name
- Fundera Inc.norm: fundera
Incident
- Discovered
- Jan 25, 2024
- Materiality determined
- —
- Notification sent
- May 6, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.