DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Community Loan Servicing

bd_bd7781afa1180b0c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2021

Filed

Aug 19, 2022

To disclose

37 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

65%
Full breach record for Community Loan Servicing

Community Loan Servicing LLC reported unauthorized access to file servers from October 27 to December 7, 2021. The incident was identified in early December 2021. Affected data included names and Social Security numbers of mortgage loan customers. The company contained the incident, notified law enforcement, engaged forensic investigators, and offered one year of identity monitoring via Kroll.

Incident timeline

undetected · 35 days
discovery → filing · 37 weeks / 261 days

Oct 27, 2021

Begins

Dec 1, 2021

Discovered

Aug 19, 2022

Filed

vs. sector median

+29 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 111d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗
Montana State AGAug 19 · first
Massachusetts State AGAug 19 · first
Oregon State AGAug 19 · first
Delaware State AGAug 19 · first
Indiana State AGAug 19 · first
Washington State AGAug 19 · first
California State AGAug 19 · first · this page

Pattern: first filing Aug 19 (MT), last Dec 8 (HI) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.