UnknownFinanceCritical

LOANDEPOT.COM, LLC

bd_39ba2cb6b3e56f4e · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jan 4, 2024

Filed

Feb 23, 2024

To disclose

7 weeks

Affected

16,924,071

Linked

10 filings

Confidence

95%

Full breach record for LOANDEPOT.COM, LLC →2 incidents on file

loanDepot.com, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2024-02-23. The breach occurred during 1/3/2024 - 1/5/2024. The breach was discovered on 1/4/2024. 16,924,071 individuals were affected. Notice was sent on 2/23/2024.

J jump to incidentP pin to compareR raw source

Oregon clock✗ OR AG >45d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 7 weeks / 50 days

Jan 3, 2024

Begins

Jan 4, 2024

Discovered

Feb 23, 2024

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Delaware State AGbd_0b32cb6f0fca79b22024-02-23Verified
California State AGbd_5b190ad591b51f152024-02-23Verified
Massachusetts State AGbd_6a4d00737168d55c2024-02-23Verified
Maine State AGbd_7cde8b7bcc15bb462024-02-23Verified

Show 5 more filings ↓up to 8d gap

South Carolina State AGbd_838b322ab3efcd232024-02-23Verified
Montana State AGbd_95ba1e9481b2f5082024-02-23Verified
Hawaii State AGbd_a6ec3f5c17e3b4852024-02-23Verified
Indiana State AGbd_bc15e3eca6436d472024-02-23Verified
Washington State AGbd_6e8924c1e600fc5b2024-02-15 · +8dCandidate

Name: LOANDEPOT.COM, LLC
norm: loandepotcom

Name: LOANDEPOT.COM, LLC
norm: loandepotcom

Discovered: Jan 4, 2024
Breach occurred: Jan 3, 2024 – Jan 5, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Feb 23, 2024
Affected individuals: 16,924,071nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: OR AG >45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Washington State AGFeb 15 · first

Delaware State AG+8d

California State AG+8d

Massachusetts State AG+8d

Maine State AG+8d

South Carolina State AG+8d

Montana State AG+8d

Hawaii State AG+8d

Indiana State AG+8d

Oregon State AG+8d · this page

Pattern: first filing Feb 15 (WA), last Feb 23 (OR) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2024
Raw hash: fe8643aece8aa9252935a39b085ccdb5ac5702b404c8e95b2cd92e4b7d9eaf2f

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityLOANDEPOT.COM, LLC

Victim entityLOANDEPOT.COM, LLC

Incidentdiscovered Jan 4, 2024

ComplianceOR AG >45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov