HackingFinancial ServicesFinanceHacking OtherCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)LowContained

ROCKET MORTGAGE, LLC

bd_ff463dd180a4bd2c · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 8, 2021

Filed

Nov 17, 2021

To disclose

14 weeks

Affected · nationwide

1331 in this filing

Linked

2 filings

Confidence

50%

Full breach record for ROCKET MORTGAGE, LLC →2 incidents on file

Rocket Mortgage LLC experienced an external system breach on August 8, 2021, which was also discovered on the same day. The breach affected 133 individuals, including one Maine resident. The compromised information included names and financial account numbers or credit/debit card numbers with their respective security codes or PINs. Affected individuals were notified on November 17, 2021, and offered 24 months of credit monitoring and identity theft protection services through LifeLock.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 8, 2021 → Filed with AG Nov 17, 2021101d ✗ ME AG >90d14 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 101 days

Aug 8, 2021

Begins

Aug 8, 2021

Discovered

Nov 17, 2021

Filed

vs. sector median

+6 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_a2283fdaf7291e0e2021-11-17Verified

Name: ROCKET MORTGAGE, LLC
norm: rocket mortgage

Name: ROCKET MORTGAGE, LLC
norm: rocket mortgage
Industry: Financial Servicesllm

Discovered: Aug 8, 2021
Breach occurred: Aug 8, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 17, 2021
Affected individuals: 133state + nationwide
Data types: Financial accountFinancial credentialsIdentity (basic)
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 24 months of credit monitoring and identity theft protection services through LifeLock
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(101 days from discovery to filing)
Compliance flags: ME AG >90d · 101d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 8, 2021
→ Filed with AG: Nov 17, 2021
101d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 8, 2021 → Filed with AG: Nov 17, 2021	101d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGNov 17 · first

Maine State AGNov 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6997a07d-7e93-40c6-9133-b39a1161c4f3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 17, 2021
Raw hash: 999b2159f6c12352b066abb6d0d8cec2f55a56952571109a2163b43c0d504100

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityROCKET MORTGAGE, LLC

Victim entityROCKET MORTGAGE, LLC

Incidentdiscovered Aug 8, 2021

Stated responseOffered 24 months of credit monitoring and identity theft protection services through LifeLock

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov