MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
American Lending Center
bd_75a2374f57e24f47 · schema v1 · pii pii-v1
Full breach record for American Lending Center →American Lending Center notified Massachusetts residents of a July 2025 ransomware incident. The threat actor compromised the internal network and encrypted files. Affected data included names, dates of birth, and Social Security numbers. No evidence of misuse was found. The company offered identity theft protection services, including credit monitoring and insurance, through IDX.
Massachusetts clock✗ MA AG >90d43 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_ca20d2c91eef834cIndiana State AGfiled 2026-04-28(3d gap)Verified
- bd_54ca171a5789d923California State AGfiled 2026-05-11(10d gap)Candidate
- bd_c6301287185b0f48Maine State AGfiled 2026-05-11(10d gap)Verified
- bd_96e44b637b54405dOregon State AGfiled 2026-05-12(11d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 17d gap
- bd_23a9d8e5a3ab89a6Washington State AGfiled 2026-05-13(12d gap)Verified
- bd_a80a8fae0ef5d7c1Vermont State AGfiled 2026-05-13(12d gap)Verified
- bd_9456432eb83081a0Texas State AGfiled 2026-05-14(13d gap)Verified
- bd_a8b55fb8bcb48cebSouth Carolina State AGfiled 2026-05-18(17d gap)Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-755-american-lending-center/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- d993d7b4a7ec1114f9ad218d6465b34a86fccdee9cb968af0d7ed66c701bb367
Reporting entity
- Name
- American Lending Centernorm: american lending center
- Domain
- americanlendingcenter.com
Victim entity
- Name
- American Lending Centernorm: american lending center
- Domain
- americanlendingcenter.com
Incident
- Discovered
- Jul 1, 2025
- Materiality determined
- —
- Notification sent
- Apr 8, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 43 weeks(304 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.