DisclosureLens
HackingFinancial ServicesTechnologyFinanceVulnerability ExploitCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDEmploymentMediumContained

Astoria Company LLC

bd_fb533866bf26298f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 8, 2021

Filed

Nov 24, 2021

To disclose

41 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

66%
Full breach record for Astoria Company LLC4 incidents on file

Astoria Company LLC, a lead exchange connecting consumers with financial services, disclosed a cyber-attack in late January 2021. A security researcher gained unauthorized access to a database containing personal information. Astoria discovered the intrusion on February 8, 2021, secured systems, and conducted a forensic investigation. The incident involved the exfiltration of names, addresses, SSNs, driver's license numbers, and employment data. Astoria reported the incident to the FBI and implemented additional security measures.

Incident timeline

undetected · 38 days
discovery → filing · 41 weeks / 289 days

Jan 1, 2021

Begins

Feb 8, 2021

Discovered

Nov 24, 2021

Filed

vs. sector median

+33 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 2d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Maine State AGNov 22 · first
Hawaii State AGNov 22 · first
California State AGNov 22 · first
Washington State AGNov 22 · first
Oregon State AGNov 22 · first
Delaware State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.