HackingFinancial ServicesRetail & ConsumerFinanceCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDPHIHealth (basic)MediumContained

SLT Lending SPV, Inc.

bd_fbe9d7baf63e1e61 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 24, 2023

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

66%

Full breach record for SLT Lending SPV, Inc. →2 incidents on file

SLT Lending SPV, Inc. (Sur La Table) notified California residents of a data breach where an unauthorized actor accessed folders containing names, driver's license/state ID numbers, and medical/health information between March 15 and March 25, 2023. The company engaged a cybersecurity firm, contained the activity, and is offering one year of credit monitoring and identity protection services via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 15, 2023

Begins

May 24, 2023

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Washington State AGbd_330c2e8859aba60e2023-05-24Candidate
Indiana State AGbd_3a327e7cb7f8e6c02023-05-24Verified
Massachusetts State AGbd_5ce1e4c4a904a0602023-05-24Verified
Vermont State AGbd_63d8e2246b31f2892023-05-24Verified

Show 3 more filings ↓

Oregon State AGbd_b7163a74913899fc2023-05-24Verified
Montana State AGbd_dd5b9174cf3ca2502023-05-24Verified
Maine State AGbd_fc44ad265d993ba92023-05-24Verified

Name: SLT Lending SPV, Inc.
norm: slt lending spv
Domain: surlatable.com

Name: SLT Lending SPV, Inc.
norm: slt lending spv
Domain: surlatable.com
Industry: Financial ServicesllmRetail & Consumerllm

Discovered: —
Breach occurred: Mar 15, 2023 – Mar 25, 2023
Materiality determined: —
Notification sent: May 24, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Implemented our incident response plan
Took steps to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Offering credit monitoring and identity protection services through IDX
Changes made: Taking steps further to enhance our existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Washington State AGMay 24 · first

Indiana State AGMay 24 · first

Massachusetts State AGMay 24 · first

Vermont State AGMay 24 · first

Oregon State AGMay 24 · first

Montana State AGMay 24 · first

Maine State AGMay 24 · first

California State AGMay 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-567188
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 24, 2023
Raw hash: e10d8b4018d1ddae4526a81545aeb5a2fefe70b818db9522706662dd22d275f1

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entitySLT Lending SPV, Inc.

Victim entitySLT Lending SPV, Inc.

IncidentUnauthorized Access

Stated responseImplemented our incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov