MalwareFinancial ServicesFinanceRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

PACIFIC RESIDENTIAL MORTGAGE, LLC

bd_21f6068d1cc6b4e2 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 10, 2025

Filed

Mar 26, 2025

To disclose

6 weeks

Affected

2,088state residents only

Linked

11 filings

Confidence

69%

Full breach record for PACIFIC RESIDENTIAL MORTGAGE, LLC →

Pacific Residential Mortgage, LLC reported a ransomware incident detected on Feb 10, 2025. Cybercriminals encrypted systems and accessed customer PII including SSNs, driver's licenses, and financial account data. 2,088 Washington residents were affected. The company engaged forensic investigators, recovered systems from backups, notified law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d6 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 6 weeks / 44 days

Feb 10, 2025

Begins

Feb 10, 2025

Discovered

Mar 26, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelynxbd_8fece7b4ffb7f5032025-02-09 · +45dVerified by operator
Leak Sitelynxbd_a338732a5d4b98fa2025-02-09 · +45dVerified by operator

Regulatory filings (8) · sorted by filing gap

California State AGbd_06445fe6fa34d7c82025-03-26Verified
Oregon State AGbd_24724886ad0dfb342025-03-26Verified
Massachusetts State AGbd_88594df146bd4ded2025-03-26Verified
Maine State AGbd_8ee1067815fa2ad62025-03-26Verified

Show 4 more filings ↓up to 393d gap

Nebraska State AGbd_37e9f7835075546e2025-03-25 · +1dCandidate
Indiana State AGbd_64f6a47a0aa61adc2025-03-25 · +1dVerified
New Hampshire State AGbd_05f1c076c84b42222025-04-03 · +8dVerified
Maryland State AGbd_0fd90a90441dd7ed2026-04-23 · +393dVerified

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com
Industry: Financial Servicesllm

Discovered: Feb 10, 2025
Breach occurred: Feb 10, 2025 – Feb 20, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: 2,088state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Hired a cybersecurity firm to secure our environment and conduct an investigation
Recovered the affected systems from backups
Informed law enforcement of the incident
Providing access to Single Bureau Credit Monitoring services at no charge
Providing proactive fraud assistance
Changes made: Strengthened its security posture to prevent a similar event from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: Leak >30dWA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGMar 25 · first

Indiana State AGMar 25 · first

California State AG+1d

Oregon State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

Washington State AG+1d · this page

New Hampshire State AG+9d

Maryland State AG+394d

Pattern: first filing Mar 25 (NE), last Apr 23 (MD) — a 394-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA32830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 26, 2025
Raw hash: 0d37435ed22b25197b33d64cc4b7dbc3d9d95f729177ff736d76d4c588d0b9fc

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Victim entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Incidentdiscovered Feb 10, 2025

Stated responseHired a cybersecurity firm to secure our environment and conduct an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com