HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHighContained

Community Loan Servicing

bd_fad7aa2f9c7e8e86 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 6, 2021

Filed

Aug 19, 2022

To disclose

37 weeks

Affected

7,518state residents only

Linked

9 filings

Confidence

71%

Full breach record for Community Loan Servicing →

Supplemental notice from Community Loan Servicing LLC regarding unauthorized access to file servers from Oct 27 to Dec 7, 2021. Incident discovered Dec 6, 2021. 7,518 Washington residents notified. Data included names, SSNs, and financial account numbers. Kroll credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d37 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 40 days

discovery → filing · 37 weeks / 256 days

Oct 27, 2021

Begins

Dec 6, 2021

Discovered

Aug 19, 2022

Filed

vs. sector median

+28 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Montana State AGbd_12b6867755eea3a12022-08-19Candidate
Massachusetts State AGbd_51a97163a481ccc72022-08-19Verified
Oregon State AGbd_638d85ff9c9775f82022-08-19Verified by operator
Delaware State AGbd_88940eaf560a23b82022-08-19Verified

Show 4 more filings ↓up to 111d gap

California State AGbd_bd7781afa1180b0c2022-08-19Verified
Indiana State AGbd_dccd45162c8032902022-08-19Verified
South Carolina State AGbd_6fff1c6f3c4a8d122022-08-22 · +3dVerified
Hawaii State AGbd_6f2b352957b1f50f2022-12-08 · +111dVerified

Name: Community Loan Servicing
norm: community loan servicing

Name: Community Loan Servicing
norm: community loan servicing
Industry: Financial Servicesllm

Discovered: Dec 6, 2021
Breach occurred: Oct 27, 2021 – Dec 7, 2021
Undetected for: 40 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2022
Affected individuals: 7,518state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberFinancial account number
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General
Initial access: valid_credentials

During the incident: Steps were immediately taken to contain the incident
Notify law enforcement
A forensic investigation firm was engaged
Offering eligible individuals complimentary one-year memberships in credit monitoring and identity protection services through Kroll
Established a dedicated, toll-free helpline
Changes made: Additional steps to further enhance its existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(256 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

Massachusetts State AGAug 19 · first

Oregon State AGAug 19 · first

Delaware State AGAug 19 · first

California State AGAug 19 · first

Indiana State AGAug 19 · first

Washington State AGAug 19 · first · this page

South Carolina State AG+3d

Hawaii State AG+111d

Pattern: first filing Aug 19 (MT), last Dec 8 (HI) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA14711.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2022
Raw hash: a8ff4eb9fa87321827637e56a5b942949802207559ac7966eeb71ee1539875ee

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityCommunity Loan Servicing

Victim entityCommunity Loan Servicing

Incidentdiscovered Dec 6, 2021

Stated responseSteps were immediately taken to contain the incident

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com