HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDHighContained

Community Loan Servicing

bd_6f2b352957b1f50f · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 1, 2021

Filed

Dec 8, 2022

To disclose

12 months

Affected

1,447state residents only

Linked

9 filings

Confidence

65%

Full breach record for Community Loan Servicing →

Community Loan Servicing LLC notified affected individuals of a security incident involving unauthorized access to file servers containing names and Social Security numbers. Access occurred between October 27 and December 7, 2021. The company engaged Kroll to provide one year of free identity monitoring services.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due12 months discovery → filing

Incident timeline

undetected · 35 days

discovery → filing · 12 months / 372 days

Oct 27, 2021

Begins

Dec 1, 2021

Discovered

Dec 8, 2022

Filed

vs. sector median

+45 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

South Carolina State AGbd_6fff1c6f3c4a8d122022-08-22 · +108dVerified
Montana State AGbd_12b6867755eea3a12022-08-19 · +111dCandidate
Massachusetts State AGbd_51a97163a481ccc72022-08-19 · +111dVerified
Oregon State AGbd_638d85ff9c9775f82022-08-19 · +111dVerified by operator

Show 4 more filings ↓up to 111d gap

Delaware State AGbd_88940eaf560a23b82022-08-19 · +111dVerified
California State AGbd_bd7781afa1180b0c2022-08-19 · +111dVerified
Indiana State AGbd_dccd45162c8032902022-08-19 · +111dVerified
Washington State AGbd_fad7aa2f9c7e8e862022-08-19 · +111dVerified

Name: Community Loan Servicing
norm: community loan servicing

Name: Community Loan Servicing
norm: community loan servicing
Industry: Financial Servicesllm

Discovered: Dec 1, 2021
Breach occurred: Oct 27, 2021 – Dec 7, 2021
Undetected for: 35 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,447state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notify law enforcement
Initial access: valid_credentials

During the incident: Steps were immediately taken to contain the incident
Notify law enforcement
A forensic investigation firm was engaged
The investigation determined that an unauthorized person obtained access
The accessed files were then reviewed by our investigation team
Engaged Kroll, a third party with monitoring expertise, to provide identity monitoring services
Changes made: Additional steps are being taken to further enhance our existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 months(372 days from discovery to filing)
Compliance flags: HI CRA notice due
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

Massachusetts State AGAug 19 · first

Oregon State AGAug 19 · first

Delaware State AGAug 19 · first

California State AGAug 19 · first

Indiana State AGAug 19 · first

Washington State AGAug 19 · first

South Carolina State AG+3d

Hawaii State AG+111d · this page

Pattern: first filing Aug 19 (MT), last Dec 8 (HI) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://cca.hawaii.gov/wp-content/uploads/2026/05/OCP_2023-0241.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 8, 2022
Raw hash: 8f48d1012e0287c4eea121aa25914384ec8a9e0b92e473fb4ab486167f5a9067

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityCommunity Loan Servicing

Victim entityCommunity Loan Servicing

Incidentdiscovered Dec 1, 2021

Stated responseSteps were immediately taken to contain the incident

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenancecca.hawaii.gov