MalwareFinancial ServicesFinanceRansomwareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountFinancial credentialsMediumContained

YouLend US LLC

bd_5847307b41c8a4eb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 9, 2026

Filed

Jul 15, 2026

To disclose

5 weeks

Affected

84state residents only

Linked

7 filings

Confidence

66%

Full breach record for YouLend US LLC →2 incidents on file

YouLend US LLC, an embedded financing provider, experienced a ransomware attack resulting in unauthorized access to its network between June 5 and June 9, 2026. The incident was discovered on June 9, 2026. Personal information, including names, Social Security numbers, financial account/payment card data, and Tax ID numbers, was acquired by the threat actor. 84 New Hampshire residents were affected. Notices were sent on July 15, 2026, and 12 months of credit monitoring were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 5 weeks / 36 days

Jun 5, 2026

Begins

Jun 9, 2026

Discovered

Jul 15, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Oregon State AGbd_184b8f1dc0796ead2026-07-15Verified
California State AGbd_f980748824188a162026-07-15Candidate
Texas State AGbd_b0943eba6233f07c2026-07-17 · +2dVerified
California State AGbd_043932063574e4552026-09-02 · +49dVerified

Show 2 more filings ↓up to 50d gap

New Hampshire State AGbd_b9c0261602d0e6e22026-09-02 · +49dVerified
Texas State AGbd_e6de9e49116b37022026-09-03 · +50dVerified

Name: YouLend US LLC
norm: youlend us

Name: YouLend US LLC
norm: youlend us
Industry: Financial Servicesllm

Discovered: Jun 9, 2026
Breach occurred: Jun 5, 2026 – Jun 9, 2026
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 15, 2026
Affected individuals: 84state-resident count only
Data types: Government IDIdentity (basic)Financial accountFinancial credentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to law enforcementReported the incident to federal law enforcement and other authorities

During the incident: Took immediate action to secure its network environment
Retained law firm
Engaged a cyber security forensics firm to assist with the investigation, remediation efforts, and for the provision of rendering legal advice
Reported the incident to law enforcement
Commenced a detailed review of the files involved to understand the data potentially involved and to whom it belonged to
Notified 84 New Hampshire residents via U.S. mail
Offered an opportunity to enroll in twelve (12) months of complimentary credit monitoring and identity protection services through CyberScout
Set up a professional call center through CyberScout to assist notified individuals with credit monitoring enrollments and to answer inquiries regarding the event
Changes made: Reviewing its existing security policies and protections
Adopting additional security to safeguard against evolving threats moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 4 states

View merged incident ↗

Oregon State AGJul 15 · first

California State AGJul 15 · first

New Hampshire State AGJul 15 · first · this page

Texas State AG+2d

California State AG+49d

New Hampshire State AG+49d

Texas State AG+50d

Pattern: first filing Jul 15 (OR), last Sep 3 (TX) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/youlend-us-20260715.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2026
Raw hash: a5aea47c693a423d36132998167258584885620797bbfef29b6fccfae9dbdf4b

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityYouLend US LLC

Victim entityYouLend US LLC

Incidentdiscovered Jun 9, 2026

Stated responseTook immediate action to secure its network environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov