UnknownMedium
Impac Mortgage Holdings, Inc.
bd_29f9d61c787b292d · schema v1 · pii pii-v1
Full breach record for Impac Mortgage Holdings, Inc. →Impac Mortgage Holdings, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-04-17. The breach occurred during 2/21/2024 - 3/20/2024. The breach was discovered on 3/20/2024. 61,066 individuals were affected. Notice was sent on 3/27/2026.
Oregon clock✗ OR AG >45d25 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 786 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_58a9dede223bedf4Washington State AGfiled 2026-04-17Verified by operator
- bd_4e082d2d800c6085Indiana State AGfiled 2026-03-27(21d gap)Candidate
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2026
- Raw hash
- bbc0ed8dfc2cb921d5d556f4048ee10fdcd3ba5ce9888a940a0c945fefedaa9c
Reporting entity
- Name
- Impac Mortgage Holdings, Inc.norm: impac mortgage
- Domain
- impaccompanies.com
Victim entity
- Name
- Impac Mortgage Holdings, Inc.norm: impac mortgage
- Domain
- impaccompanies.com
Incident
- Discovered
- Mar 20, 2024
- Materiality determined
- —
- Notification sent
- Mar 27, 2026
- Affected individuals
- 61,066
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 25 months(758 days from discovery to filing)
- Compliance flags
- OR AG >45dLeak >180d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.