HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Community Loan Servicing
bd_88940eaf560a23b8 · schema v1 · pii pii-v1
Full breach record for Community Loan Servicing →Community Loan Servicing LLC (CLS) disclosed a security incident involving unauthorized access to file servers from October 27 to December 7, 2021. The breach affected 678 Delaware residents, exposing names, Social Security numbers, and financial account numbers. CLS engaged law enforcement and forensic investigators, contained the incident, and began notifying affected individuals starting in March 2022, offering one year of credit monitoring through Kroll.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_12b6867755eea3a1Montana State AGfiled 2022-08-19Candidate
- bd_638d85ff9c9775f8Oregon State AGfiled 2022-08-19Verified by operator
- bd_bd7781afa1180b0cCalifornia State AGfiled 2022-08-19Verified
- bd_fad7aa2f9c7e8e86Washington State AGfiled 2022-08-19Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/09/CLS_DE-App-Sample.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 19, 2022
- Raw hash
- 543f0a6159a1142fdb591fb3b6ee0971a680c6c4f032870264eb2899f06bb437
Reporting entity
- Name
- Community Loan Servicingnorm: community loan servicing
Victim entity
- Name
- Community Loan Servicingnorm: community loan servicing
Incident
- Discovered
- Dec 7, 2021
- Materiality determined
- —
- Notification sent
- Aug 19, 2022
- Affected individuals
- 678
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 36 weeks(255 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.