Impac Mortgage Holdings, Inc.
bd_a667bbb3577976b5 · schema v1 · pii pii-v1
Full breach record for Impac Mortgage Holdings, Inc. →Impac Mortgage Holdings, Inc. (Irvine, CA) reported a data breach to the Maine Attorney General. The filing describes an external system breach (hacking) with breach date of 02/21/2024 and a discovery date of 03/27/2026 (note: ~2-year gap between occurrence and discovery, which is unusual and may reflect a typo in the form). Written notification was sent to affected Maine residents on 03/27/2026, accompanied by an offer of 12 months of TransUnion credit monitoring. Total persons affected and Maine residents affected fields are blank in the filing. Specific data elements acquired are not enumerated in the form.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a91176be-e731-48c1-92d2-df84d9c98799.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2026
- Raw hash
- 22244f7e128f7ceead158e8dd513c1f7cff5827901aeb8ac904dc0b110bf624c
Reporting entity
- Name
- Impac Mortgage Holdings, Inc.norm: impac mortgage
- Domain
- impaccompanies.com
Victim entity
- Name
- Impac Mortgage Holdings, Inc.norm: impac mortgage
- Domain
- impaccompanies.com
- Industry
- Other Commercial
- Industry
- Financial Servicesllm
Incident
- Discovered
- Mar 27, 2026
- Materiality determined
- —
- Notification sent
- Mar 27, 2026
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 21d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 27, 2026→ Filed with AG: Apr 17, 202621d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.