HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumResolved
MCLEAN MORTGAGE CORPORATION
bd_b7095e0d26041213 · schema v1 · pii pii-v1
Full breach record for MCLEAN MORTGAGE CORPORATION →McLean Mortgage Corporation (Fairfax, VA) suffered an external network breach on Oct 17, 2024. An unauthorized actor may have downloaded files with names, SSNs, driver's license numbers, and financial account numbers. Breach discovered May 12, 2025 after forensic review. 30,453 total affected; 17 Maine residents. Notifications sent June 11, 2025. IDX credit/identity monitoring (12 months) offered.
Leak gap clock✗ Leak >180d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed17 affectedView incident
A leak claim by black_basta about this victim predates this filing by 237 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e423ab1f-c575-44f8-b5fc-c02533be7338.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2025
- Raw hash
- 6e0717ab8ffa9f34a21ca989647e5a4572d9069dbdccd84172bda72ada1b978e
Reporting entity
- Name
- MCLEAN MORTGAGE CORPORATIONnorm: mclean mortgage
- Domain
- mcleanmortgage.com
- Industry
- Financial Services
Victim entity
- Name
- MCLEAN MORTGAGE CORPORATIONnorm: mclean mortgage
- Domain
- mcleanmortgage.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- May 12, 2025
- Materiality determined
- —
- Notification sent
- Jun 11, 2025
- Affected individuals
- 17
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified FBIWritten notice to state regulators
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 12, 2025→ Filed with AG: Jun 11, 202530d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.