MalwareRansomwareData EncryptedData ExfiltratedIDENTITY_GOVERNMENTPIIMediumContained
RPM Receivables Performance Management
bd_c0271b51208c2f7f · schema v1 · pii pii-v1
Full breach record for RPM Receivables Performance Management →Receivables Performance Management LLC (RPM) disclosed a ransomware incident affecting its server infrastructure. First access occurred approx. April 8, 2021; ransomware launched May 12, 2021. RPM took systems offline, rebuilt servers, and retained forensic investigators. The investigation identified Social Security numbers in affected files. RPM offered TransUnion credit monitoring. Notification sent Dec 2022.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_29434f5b2c74747dCalifornia State AGfiled 2022-11-21Verified
- bd_ad14f16fc621026cDelaware State AGfiled 2022-10-02(50d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/12/Individual-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2022
- Raw hash
- 252dcf0f6bac8564c04c3ec9142e237565df38f86f50b4b73203fae2187ea32f
Reporting entity
- Name
- RPM Receivables Performance Managementnorm: rpm receivables performance management
- Domain
- receivablesperformance.com
Victim entity
- Name
- RPM Receivables Performance Managementnorm: rpm receivables performance management
- Domain
- receivablesperformance.com
Incident
- Discovered
- May 12, 2021
- Materiality determined
- —
- Notification sent
- Dec 1, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 19 months(558 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.