PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

OnDeck Capital

bd_3d330d8de8ec3505 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 8, 2016

To disclose

—

Affected

13state residents only

Linked

2 filings

Confidence

66%

Full breach record for OnDeck Capital →3 incidents on file

OnDeck Capital, Inc. reported the theft of a company laptop in November 2015 containing personal information of 13 New Hampshire residents, including names, SSNs, and bank account numbers. Notification was sent in April 2016, offering two years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 1, 2015

Begins

Apr 8, 2016

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_680d0061370ab9a22016-04-11 · +3dCandidate

Name: The Reiss Firm
norm: the reiss firm

Name: OnDeck Capital
norm: ondeck capital
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Nov 1, 2015 – Nov 30, 2015
Materiality determined: —
Notification sent: Apr 11, 2016
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Conducted an investigation of the incident
Implemented previously planned security enhancements to hardware and software
Providing notice of this incident via mail to affected New Hampshire residents
Offering two years of complimentary credit monitoring to affected New Hampshire residents
Changes made: Enhancements to hardware and software
Enhancements to procedures to mitigate future risk
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 8 · first · this page

Montana State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ondeck-capital-20160408.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2016
Raw hash: a808ed749b5b2f417216d2e13822585c4ffdf585758d44ce1beb5ac68ccf8fa9

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Reiss Firm

Victim entityOnDeck Capital

IncidentUnknown

Stated responseConducted an investigation of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov