DisclosureLens
AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedPIIIdentity (basic)Government IDMediumResolved

Mahindra Finance USA

bd_be706e921e338744 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 6, 2021

Filed

Jun 10, 2021

To disclose

9 weeks

Affected · nationwide

414 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Mahindra Finance USA →

Mahindra Finance USA LLC reported an inadvertent disclosure of personal information affecting four Maine residents. The breach, which occurred on April 1, 2021, and was discovered on April 6, 2021, resulted in the exposure of names and Social Security numbers. The company provided two years of three-bureau credit monitoring services through Identity Force to the affected individuals.

Maine clockDiscovered Apr 6, 2021 → Filed with AG Jun 10, 202165d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days
discovery → filing · 9 weeks / 65 days

Apr 1, 2021

Begins

Apr 6, 2021

Discovered

Jun 10, 2021

Filed

vs. sector median

+1 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Massachusetts State AGJun 10 · first
Maine State AGJun 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.