HackingFinancial ServicesFinanceCustomer Data InvolvedPIIIdentity (basic)LowContained

EMM LOANS LLC

bd_63f1892ecd3b21ef · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 12, 2024

Filed

Nov 7, 2024

To disclose

38 weeks

Affected

259state residents only

Linked

5 filings

Confidence

66%

Full breach record for EMM LOANS LLC →

EMM Loans LLC notified the New Hampshire Attorney General of a data security incident discovered on February 12, 2024. Unauthorized access to network data affected approximately 259 New Hampshire residents. The company engaged forensic investigators, secured its systems, and sent notifications to affected individuals by September 4, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 38 weeks / 269 days

Feb 12, 2024

Discovered

Nov 7, 2024

Filed

vs. sector median

+30 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_50254e778a3573432024-11-07Verified
Maine State AGbd_5e8805177629c8742024-11-07Verified
Vermont State AGbd_d02023d8f48bcab72024-11-07Verified
Indiana State AGbd_242d8f138e1f073d2024-10-30 · +8dCandidate

Name: EMM LOANS LLC
norm: emm loans

Name: EMM LOANS LLC
norm: emm loans
Industry: Financial Servicesllm

Discovered: Feb 12, 2024
Materiality determined: —
Notification sent: Sep 4, 2024
Affected individuals: 259state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella

During the incident: Immediately took measures to secure its network, systems, and data
Engaged a digital forensics firm, on EMM Loans’ behalf, to conduct a privileged investigation
Launched a comprehensive review of the potentially affected data
Worked diligently to validate the results and confirm addresses for potentially affected individuals
Arranged for notification to potentially impacted individuals
Changes made: Taken measures to reduce the likelihood of a similar incident reoccurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(269 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGOct 30 · first

Massachusetts State AG+8d

Maine State AG+8d

Vermont State AG+8d

New Hampshire State AG+8d · this page

Pattern: first filing Oct 30 (IN), last Nov 7 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/emm-loans-20241107.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 7, 2024
Raw hash: 3d40c07390ec5fa3f1056f35a9c07ccf0054eb7aa027154f1229d70d02f4773f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityEMM LOANS LLC

Victim entityEMM LOANS LLC

Incidentdiscovered Feb 12, 2024

Stated responseImmediately took measures to secure its network, systems, and data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov