HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Pingora Loan Servicing, LLC
bd_638543a08cfb9f9f · schema v1 · pii pii-v1
Full breach record for Pingora Loan Servicing, LLC →Pingora Loan Servicing, LLC reported a security incident involving unauthorized access to its file servers from October 27, 2021, to December 7, 2021. The breach exposed customer names, addresses, loan numbers, and Social Security numbers. Pingora engaged law enforcement and forensic investigators, contained the incident, and provided one year of complimentary identity monitoring services through Kroll to affected individuals.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_3204996119abee85New Hampshire State AGfiled 2022-04-06Verified
- bd_625fef58856fbcdcMontana State AGfiled 2022-04-06Candidate
- bd_af92f7dd267474c4Washington State AGfiled 2022-04-06Verified
- bd_bdb38b23603d3ef5Oregon State AGfiled 2022-04-06Verified
Show 1 more filing ↓Show fewer ↑
- bd_dc39405a4003c9b9Delaware State AGfiled 2022-04-06Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-552339
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2022
- Raw hash
- 54b376837e48d2eda289df36af1821bbba30edde09dfe6e1bb108e4430f90b85
Reporting entity
- Name
- Pingora Loan Servicing, LLCnorm: pingora loan servicing
Victim entity
- Name
- Pingora Loan Servicing, LLCnorm: pingora loan servicing
Incident
- Discovered
- Dec 7, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.