HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Pingora Loan Servicing, LLC
bd_3204996119abee85 · schema v1 · pii pii-v1
Full breach record for Pingora Loan Servicing, LLC →Pingora Loan Servicing, LLC notified the New Hampshire Attorney General of a security incident involving unauthorized access to file servers from October 27 to December 7, 2021. The breach affected 8,951 New Hampshire residents, exposing names, addresses, loan numbers, and Social Security numbers. Pingora engaged law enforcement and forensic investigators, contained the incident, and began mailing notifications on April 6, 2022, offering one year of credit monitoring via Kroll.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_625fef58856fbcdcMontana State AGfiled 2022-04-06Candidate
- bd_638543a08cfb9f9fCalifornia State AGfiled 2022-04-06Verified
- bd_af92f7dd267474c4Washington State AGfiled 2022-04-06Verified
- bd_bdb38b23603d3ef5Oregon State AGfiled 2022-04-06Verified
Show 1 more filing ↓Show fewer ↑
- bd_dc39405a4003c9b9Delaware State AGfiled 2022-04-06Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pingora-loan-servicing-20220406.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2022
- Raw hash
- cbfc7281125be49db63c35e284fe9b7b5018ecc3cd54228cc0e84663f7a1b34a
Reporting entity
- Name
- Pingora Loan Servicing, LLCnorm: pingora loan servicing
Victim entity
- Name
- Pingora Loan Servicing, LLCnorm: pingora loan servicing
Incident
- Discovered
- Dec 1, 2021
- Materiality determined
- —
- Notification sent
- Apr 6, 2022
- Affected individuals
- 8,951
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(126 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.