MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

PACIFIC RESIDENTIAL MORTGAGE, LLC

bd_8ee1067815fa2ad6 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 10, 2025

Filed

Mar 26, 2025

To disclose

6 weeks

Affected · nationwide

35,5253 in this filing

Linked

11 filings

Confidence

66%

Full breach record for PACIFIC RESIDENTIAL MORTGAGE, LLC →

Pacific Residential Mortgage, LLC reported a ransomware incident on February 10, 2025, affecting 35,525 individuals. The breach exposed names, addresses, SSNs, driver's license numbers, and financial account information. The company engaged forensic investigators, recovered systems from backups, notified law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 10, 2025 → Filed with AG Mar 26, 202544d ⏱ ME AG >30d6 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 6 weeks / 44 days

Feb 10, 2025

Begins

Feb 10, 2025

Discovered

Mar 26, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelynxbd_8fece7b4ffb7f5032025-02-09 · +45dVerified by operator
Leak Sitelynxbd_a338732a5d4b98fa2025-02-09 · +45dVerified by operator

Regulatory filings (8) · sorted by filing gap

California State AGbd_06445fe6fa34d7c82025-03-26Verified
Washington State AGbd_21f6068d1cc6b4e22025-03-26Verified
Oregon State AGbd_24724886ad0dfb342025-03-26Verified
Massachusetts State AGbd_88594df146bd4ded2025-03-26Verified

Show 4 more filings ↓up to 393d gap

Nebraska State AGbd_37e9f7835075546e2025-03-25 · +1dCandidate
Indiana State AGbd_64f6a47a0aa61adc2025-03-25 · +1dVerified
New Hampshire State AGbd_05f1c076c84b42222025-04-03 · +8dVerified
Maryland State AGbd_0fd90a90441dd7ed2026-04-23 · +393dVerified

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com
Industry: Financial Services

Name: PACIFIC RESIDENTIAL MORTGAGE, LLC
norm: pacific residential mortgage
Domain: pacresmortgage.com
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Feb 10, 2025
Breach occurred: Feb 10, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2025
Affected individuals: 35,525state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Maine Attorney General

During the incident: Hired a cybersecurity firm to secure environment and conduct investigation
Recovered affected systems from backups
Informed law enforcement of the incident
Provided access to Single Bureau Credit Monitoring services at no charge
Provided proactive fraud assistance by Cyberscout
Changes made: Strengthened security posture to prevent a similar event from occurring again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: ME AG >30d · 44dLeak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 10, 2025
→ Filed with AG: Mar 26, 2025
44d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 10, 2025 → Filed with AG: Mar 26, 2025	44d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGMar 25 · first

Indiana State AGMar 25 · first

California State AG+1d

Washington State AG+1d

Oregon State AG+1d

Massachusetts State AG+1d

Maine State AG+1d · this page

New Hampshire State AG+9d

Maryland State AG+394d

Pattern: first filing Mar 25 (NE), last Apr 23 (MD) — a 394-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca47e09c-2a57-4a13-9327-787731c9e096.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 26, 2025
Raw hash: f56605ecf54d2188cf1f63cda6d2000d6925978073ee65898adf959e1f131d36

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Victim entityPACIFIC RESIDENTIAL MORTGAGE, LLC

Incidentdiscovered Feb 10, 2025

Stated responseHired a cybersecurity firm to secure environment and conduct investigation

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov