Social EngineeringPhishingCustomer Data InvolvedIDENTITY_GOVERNMENTMedium
Acra Lending
bd_49b56d45deb5838c · schema v1 · pii pii-v1
Full breach record for Acra Lending →Citadel Servicing Corporation dba Acra Lending reported a data breach caused by a phishing email. The incident occurred between March 31, 2021, and August 24, 2021, and was discovered on February 18, 2022. The breach affected four Maine residents. The company offered 12 months of identity theft protection services through TransUnion.
Maine clockDiscovered Feb 18, 2022 → Filed with AG Mar 22, 202232d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2d5427043c8c92e7Montana State AGfiled 2022-03-22Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/75ff4b2f-a544-440b-9638-2e86e5e27537.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2022
- Raw hash
- fac4bbb25cb2fdae64bb23d9bb924b3098cc801a87389cdc6aaaa014dd4c4ac1
Reporting entity
- Name
- Acra Lendingnorm: acra lending
Victim entity
- Name
- Acra Lendingnorm: acra lending
Incident
- Discovered
- Feb 18, 2022
- Materiality determined
- —
- Notification sent
- Mar 18, 2022
- Affected individuals
- 4
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Phishing
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 18, 2022→ Filed with AG: Mar 22, 202232d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.