HackingCustomer Data InvolvedIDENTITY_BASICLowContained
SunSource
bd_3579acec59f4d35e · schema v1 · pii pii-v1
Full breach record for SunSource →SunSource Borrower, LLC disclosed a data breach in Massachusetts affecting individuals whose names and additional data elements were accessed by an unauthorized third party between March 31 and April 5, 2026. The company engaged forensic experts, confirmed network security, and offered two years of complimentary identity monitoring services.
Massachusetts clock⏱ MA AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by payoutsking about this victim predates this filing by 42 days.View originating leak claim
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-988-sunsource-borrower-llc-sunsource/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 424d6f9ea13653a1fc8e82d1c608e5513221f500b73d55f1c7340ae5e174ad23
Reporting entity
- Name
- SunSourcenorm: sunsource
- Domain
- sunsourceus.com
Victim entity
- Name
- SunSourcenorm: sunsource
- Domain
- sunsourceus.com
Incident
- Discovered
- Apr 5, 2026
- Materiality determined
- —
- Notification sent
- May 4, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- MA AG >30dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.