DisclosureLens
MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)MediumContained

Receivables Performance Management, LLC

bd_ad14f16fc621026c · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 12, 2021

Filed

Oct 2, 2022

To disclose

17 months

Affected

Not disclosed

Linked

9 filings

Confidence

65%
Full breach record for Receivables Performance Management, LLC

Receivables Performance Management, LLC disclosed a ransomware incident affecting its server infrastructure. First access occurred April 8, 2021, with ransomware deployment on May 12, 2021. The incident resulted in unauthorized access and potential acquisition of personal information, including Social Security numbers. RPM physically disconnected equipment, rebuilt servers, retained forensic investigators, and offered 12 months of TransUnion credit monitoring. The notification was issued in December 2022.

Incident timeline

undetected · 34 days
discovery → filing · 17 months / 508 days

Apr 8, 2021

Begins

May 12, 2021

Discovered

Oct 2, 2022

Filed

vs. sector median

+64 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 50d gap

Filing propagation · 9 filings · 8 states

View merged incident ↗

Pattern: first filing Oct 2 (DE), last Nov 21 (WA) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.