HackingFinancial ServicesFinanceStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDPIIHighContained

Community Loan Servicing

bd_6fff1c6f3c4a8d12 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 7, 2021

Filed

Aug 22, 2022

To disclose

37 weeks

Affected

3,401state residents only

Linked

9 filings

Confidence

64%

Full breach record for Community Loan Servicing →

Community Loan Servicing LLC notified affected individuals of a security incident involving unauthorized access to file servers from October 27 to December 7, 2021. The incident exposed names and Social Security numbers. CLS engaged Kroll for one year of identity monitoring services and law enforcement was notified.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due37 weeks discovery → filing

Incident timeline

undetected · 41 days

discovery → filing · 37 weeks / 258 days

Oct 27, 2021

Begins

Dec 7, 2021

Discovered

Aug 22, 2022

Filed

vs. sector median

+28 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Montana State AGbd_12b6867755eea3a12022-08-19 · +3dCandidate
Massachusetts State AGbd_51a97163a481ccc72022-08-19 · +3dVerified
Oregon State AGbd_638d85ff9c9775f82022-08-19 · +3dVerified by operator
Delaware State AGbd_88940eaf560a23b82022-08-19 · +3dVerified

Show 4 more filings ↓up to 108d gap

California State AGbd_bd7781afa1180b0c2022-08-19 · +3dVerified
Indiana State AGbd_dccd45162c8032902022-08-19 · +3dVerified
Washington State AGbd_fad7aa2f9c7e8e862022-08-19 · +3dVerified
Hawaii State AGbd_6f2b352957b1f50f2022-12-08 · +108dVerified

Name: Community Loan Servicing
norm: community loan servicing

Name: Community Loan Servicing
norm: community loan servicing
Industry: Financial Servicesllm

Discovered: Dec 7, 2021
Breach occurred: Oct 27, 2021 – Dec 7, 2021
Undetected for: 41 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 2, 2022
Affected individuals: 3,401state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notify law enforcement
Initial access: valid_credentials

During the incident: Steps were immediately taken to contain the incident
Notify law enforcement
A forensic investigation firm was engaged
Engaged Kroll, a third party with monitoring expertise, to provide identity monitoring services at no cost to you for one year
Changes made: Additional steps are being taken to further enhance our existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(258 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

Massachusetts State AGAug 19 · first

Oregon State AGAug 19 · first

Delaware State AGAug 19 · first

California State AGAug 19 · first

Indiana State AGAug 19 · first

Washington State AGAug 19 · first

South Carolina State AG+3d · this page

Hawaii State AG+111d

Pattern: first filing Aug 19 (MT), last Dec 8 (HI) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/CommunityLoanServicingLLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2022
Raw hash: e12567d2f3ba68c21cb1f9f0769c080de0732e79a095337683d3f5b554915fb0

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityCommunity Loan Servicing

Victim entityCommunity Loan Servicing

Incidentdiscovered Dec 7, 2021

Stated responseSteps were immediately taken to contain the incident

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov