LENDUS, LLC

LendUS, LLC notified the New Hampshire Attorney General of a security incident involving unauthorized access to employee email accounts between February 2 and March 22, 2021. The breach affected two New Hampshire residents, exposing names, Social Security numbers, financial account numbers, and/or payment card numbers. LendUS discovered the incident on December 21, 2021, and began notifying affected individuals on January 19, 2022. Remediation included password resets, multi-factor authentication, and security awareness training. Affected individuals received one year of credit monitoring via Equifax.