HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
MCLEAN MORTGAGE CORPORATION
bd_dd2ec007df6ac7df · schema v1 · pii pii-v1
Full breach record for MCLEAN MORTGAGE CORPORATION →McLean Mortgage Corporation notified the New Hampshire Attorney General of a data event affecting approximately 9 NH residents. Suspicious activity was identified on October 17, 2024, revealing unauthorized network access and potential file downloads. Affected data included names and Social Security numbers. The company engaged forensic investigators, notified the FBI, and provided 12 months of credit monitoring to affected individuals.
Leak gap clock✗ Leak >180d34 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident
A leak claim by black_basta about this victim predates this filing by 237 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mclean-mortgage-202506011.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2025
- Raw hash
- f6d77394f402e569b6d654a2939cb4d54095f6d8720cd06b2564b59ad1d92d09
Reporting entity
- Name
- MCLEAN MORTGAGE CORPORATIONnorm: mclean mortgage
- Domain
- mcleanmortgage.com
Victim entity
- Name
- MCLEAN MORTGAGE CORPORATIONnorm: mclean mortgage
- Domain
- mcleanmortgage.com
Incident
- Discovered
- Oct 17, 2024
- Materiality determined
- May 12, 2025
- Notification sent
- Jun 11, 2025
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement (FBI)
Compliance
- Time to disclose
- 34 weeks(237 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.