MalwareFinanceIdentity (basic)Government IDFinancial accountMediumContained

ANCHOR LOANS, LP

bd_4bf7b265d8b2b405 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 22, 2021

Filed

May 7, 2021

To disclose

11 weeks

Affected

7state residents only

Linked

4 filings

Confidence

67%

Full breach record for ANCHOR LOANS, LP →2 incidents on file

Anchor Loans, LP reported a ransomware incident to the New Hampshire Attorney General on May 7, 2021. The company discovered on February 22, 2021, that its systems were encrypted by ransomware. The attack resulted in the copying of files containing personal information (names, DOB, SSN, account numbers) for 7 New Hampshire residents. Notifications were sent on May 7, 2021, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 74 days

Feb 22, 2021

Discovered

May 7, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_46c34367908549402021-05-07Verified
California State AGbd_6c101f968e6afb0d2021-05-07Candidate
Indiana State AGbd_fbde8d786ac806812021-05-07Verified

Name: ANCHOR LOANS, LP
norm: anchor loans

Name: ANCHOR LOANS, LP
norm: anchor loans

Discovered: Feb 22, 2021
Materiality determined: —
Notification sent: May 7, 2021
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Investigated the incident with the help of a leading cybersecurity firm
Took steps to help prevent any recurrence
Took additional technical steps to further secure its systems
Offering a complimentary one-year membership of Experian IdentityWorks Credit 3B
Changes made: Took additional technical steps to further secure its systems and prevent this type of incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMay 7 · first

California State AGMay 7 · first

Indiana State AGMay 7 · first

New Hampshire State AGMay 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/anchor-loans-20210507.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2021
Raw hash: 2f1eb0f59f57036623034141e9836678c9880e9008e23841cabc89e849c18c08

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityANCHOR LOANS, LP

Victim entityANCHOR LOANS, LP

Incidentdiscovered Feb 22, 2021

Stated responseInvestigated the incident with the help of a leading cybersecurity firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov