CITYWIDE HOME LOANS, LLC
bd_2702f95acf3ad78e · schema v1 · pii pii-v1
Full breach record for CITYWIDE HOME LOANS, LLC →Citywide Home Loans, LLC reported a data breach to the Maine Attorney General, indicating that an external system breach involving malware and ransomware occurred on November 18, 2020. The breach was discovered on November 29, 2020. Five Maine residents were affected, part of a larger group of 16,615 individuals. The compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on February 12, 2021, and offered 24 months of credit monitoring and identity theft restoration services through Kroll.
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_d0e27bedc188f9fbMontana State AGfiled 2021-02-12(1d gap)Verified
- bd_5b65411c4f7f434cCalifornia State AGfiled 2021-02-16(5d gap)Verified
- bd_6a666b75ee10fc92Washington State AGfiled 2021-03-19(36d gap)Verified
- bd_cabec36232263204Oregon State AGfiled 2021-03-19(36d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 42d gap
- bd_e8ea5bf83df4ef80Maine State AGfiled 2021-03-19(36d gap)Verified
- bd_bd7db8214abdd3baMaine State AGfiled 2021-03-25(42d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5ba14d66-4724-403b-bcfe-9a8546cc672f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 11, 2021
- Raw hash
- b7eaf77869ab8560b87400bf9ca839d84d597ecc0c2f59afa704497ff7c53870
Reporting entity
- Name
- CITYWIDE HOME LOANS, LLCnorm: citywide home loans
- Industry
- Financial Services
Victim entity
- Name
- CITYWIDE HOME LOANS, LLCnorm: citywide home loans
- Industry
- Financial Services
Incident
- Discovered
- Nov 29, 2020
- Materiality determined
- —
- Notification sent
- Feb 12, 2021
- Affected individuals
- 5
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- ME AG >30d · 74dME resident >60d · 75d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 29, 2020→ Filed with AG: Feb 11, 202174d 30 days (soft) ME AG >30d Maine Discovered: Nov 29, 2020→ Notified: Feb 12, 202175d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.