HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
PLANET HOME LENDING, LLC
bd_6a67d4bb7edefa9b · schema v1 · pii pii-v1
Full breach record for PLANET HOME LENDING, LLC →Planet Home Lending, LLC reported an external system breach (hacking) occurring on November 15, 2023, discovered on the same date. The incident affected 199,873 individuals, including 193 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification on January 25, 2024, and offered 24 months of Experian IdentityWorks services.
Leak gap clock✗ Leak >180d10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 184 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9a07f8813460f791Delaware State AGLockBitfiled 2024-01-25(1d gap)Verified
- bd_ea73c1985b4e24abIndiana State AGfiled 2024-01-25(1d gap)Verified
- bd_6076d03c1a327fbbWashington State AGfiled 2024-01-23(3d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5f9aa393-9c7a-49e0-855f-5e36adfb9e6c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2024
- Raw hash
- 912f87ae883d908fe6c6f93064d2885a94b415f6d83318d30a5d29b90de749da
Reporting entity
- Name
- PLANET HOME LENDING, LLCnorm: planet home lending
- Domain
- planethomelending.com
- Industry
- Financial Services
Victim entity
- Name
- PLANET HOME LENDING, LLCnorm: planet home lending
- Domain
- planethomelending.com
- Industry
- Financial Services
Incident
- Discovered
- Nov 15, 2023
- Materiality determined
- —
- Notification sent
- Jan 25, 2024
- Affected individuals
- 199,873
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 72dME resident >60d · 71d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 15, 2023→ Filed with AG: Jan 26, 202472d 30 days (soft) ME AG >30d Maine Discovered: Nov 15, 2023→ Notified: Jan 25, 202471d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.