HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Fundera Inc.
bd_b1fdfc8aae679f64 · schema v1 · pii pii-v1
Full breach record for Fundera Inc. →Fundera Inc. reported an unauthorized third-party access incident occurring on January 20, 2024, discovered on April 26, 2024. The breach affected 2,664 individuals, including 9 Maine residents. Compromised data included names and driver's license numbers. Fundera provided 24 months of identity theft monitoring through CyEx Identity Defense.
Maine clockDiscovered Apr 26, 2024 → Filed with AG May 6, 202410d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1472ab6e53d4eba1Vermont State AGfiled 2024-05-06Verified
- bd_286d9fb65a5bd7b8Indiana State AGfiled 2024-05-06Verified
- bd_ea19c530de84413aMontana State AGfiled 2024-05-06Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1b14b6b5-612c-4fa8-ad14-cecd5fdd206b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2024
- Raw hash
- d2219d10a69a35dce3d021e507fc3eac462f2bbe070dec0fb6d20f617555eb77
Reporting entity
- Name
- Fundera Inc.norm: fundera
Victim entity
- Name
- Fundera Inc.norm: fundera
Incident
- Discovered
- Apr 26, 2024
- Materiality determined
- —
- Notification sent
- May 6, 2024
- Affected individuals
- 2,664
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 26, 2024→ Filed with AG: May 6, 202410d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.