HackingFinancial ServicesFinanceVulnerability ExploitZero-DayData ExfiltratedTargetedPIIIdentity (basic)Financial accountLowContained

PLANET HOME LENDING, LLC

bd_3b819f89fa038bce · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 1, 2023

Filed

Aug 31, 2023

To disclose

13 weeks

Affected

6state residents only

Linked

6 filings

Confidence

65%

Full breach record for PLANET HOME LENDING, LLC →3 incidents on file

Planet Home Lending, LLC notified Montana residents of a cybersecurity incident involving the MOVEit file transfer platform. Hackers exploited a zero-day vulnerability on May 29, 2023. The company discovered the breach on June 1, 2023, contained the threat, and engaged forensic investigators. Loan files containing PII were compromised. The company notified law enforcement, patched the vulnerability, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 13 weeks / 91 days

May 29, 2023

Begins

Jun 1, 2023

Discovered

Aug 31, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_1c4250820fe92ef42023-07-26 · +36dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_8f59fead7f890d282023-08-31Verified
Maine State AGbd_b34f0ebf70c3c7472023-09-08 · +8dVerified by operator
Massachusetts State AGbd_67ab29bf34feb2df2023-09-11 · +11dVerified by operator
New Hampshire State AGbd_1466ef09365267252023-09-13 · +13dVerified by operator

Name: PLANET HOME LENDING, LLC
norm: planet home lending
Domain: planethomelending.com

Name: PLANET HOME LENDING, LLC
norm: planet home lending
Domain: planethomelending.com
Industry: Financial Servicesllm

Discovered: Jun 1, 2023
Breach occurred: May 29, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 31, 2023
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: exploit_public_facing

During the incident: Took immediate action to contain the incident and eradicate the threat
Retained an experienced outside forensics firm to conduct a thorough investigation
Secured our environment
Conducted a full forensic investigation
Notified law enforcement
Changes made: Installed all patches released by Progress Software
Implemented additional technical safeguards to help prevent against similar incidents in the future
Offering 12/24 months of complimentary credit monitoring and identity protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGAug 31 · first

Montana State AGAug 31 · first · this page

Maine State AG+8d

Massachusetts State AG+11d

New Hampshire State AG+13d

Pattern: first filing Aug 31 (IN), last Sep 13 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2023
Raw hash: 63230685a4475f7f1bd79f3f66162ca226e7048c83edba07130402101a396d5a

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityPLANET HOME LENDING, LLC

Victim entityPLANET HOME LENDING, LLC

Incidentdiscovered Jun 1, 2023

Stated responseTook immediate action to contain the incident and eradicate the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov