HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
LoanCare, LLC
bd_a83ab9d0b495249e · schema v1 · pii pii-v1
Full breach record for LoanCare, LLC →LoanCare, LLC reported an external system breach (hacking) occurring on November 19, 2023, discovered on December 13, 2023. The incident compromised names and Social Security Numbers of approximately 1.3 million individuals, including 4,787 Maine residents. LoanCare notified consumers in writing on December 20, 2023, and provided 24 months of credit monitoring and identity theft restoration services through Kroll.
Maine clockDiscovered Dec 13, 2023 → Filed with AG Dec 22, 20239d ✓ ME AG ≤30d9 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_0d25ed3880248346Oregon State AGfiled 2023-12-22Verified
- bd_641ad1b56e1932e3California State AGfiled 2023-12-22Verified
- bd_a8f2a740e499e5caWashington State AGfiled 2023-12-22Verified
- bd_578af16463781048Montana State AGfiled 2023-12-21(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 21d gap
- bd_7fabed71d6cd01adDelaware State AGfiled 2023-12-20(2d gap)Verified
- bd_d04aec468414a915Delaware State AGfiled 2023-12-20(2d gap)Candidate
- bd_dd5b86a0d84e81b8South Carolina State AGfiled 2024-01-12(21d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/25bd9abc-608b-4a8a-8f35-ba5413b9399f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2023
- Raw hash
- c72327abb412b38d030375a483b474f2dbc27680628750a2ddc0275bb52ae7f6
Reporting entity
- Name
- LoanCare, LLCnorm: loancare
- Domain
- loancare.com
- Industry
- Financial Services
Victim entity
- Name
- LoanCare, LLCnorm: loancare
- Domain
- loancare.com
- Industry
- Financial Services
Incident
- Discovered
- Dec 13, 2023
- Materiality determined
- —
- Notification sent
- Dec 20, 2023
- Affected individuals
- 1,316,938
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 9d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 13, 2023→ Filed with AG: Dec 22, 20239d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.