HackingHacking OtherCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSIDENTITY_BASICLowContained
Rocket Mortgage LLC
bd_ff463dd180a4bd2c · schema v1 · pii pii-v1
Full breach record for Rocket Mortgage LLC →Rocket Mortgage LLC experienced an external system breach on August 8, 2021, which was also discovered on the same day. The breach affected 133 individuals, including one Maine resident. The compromised information included names and financial account numbers or credit/debit card numbers with their respective security codes or PINs. Affected individuals were notified on November 17, 2021, and offered 24 months of credit monitoring and identity theft protection services through LifeLock.
Maine clockDiscovered Aug 8, 2021 → Filed with AG Nov 17, 2021101d ✗ ME AG >90d14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6997a07d-7e93-40c6-9133-b39a1161c4f3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2021
- Raw hash
- 999b2159f6c12352b066abb6d0d8cec2f55a56952571109a2163b43c0d504100
Reporting entity
- Name
- Rocket Mortgage LLCnorm: rocket mortgage
Victim entity
- Name
- Rocket Mortgage LLCnorm: rocket mortgage
Incident
- Discovered
- Aug 8, 2021
- Materiality determined
- —
- Notification sent
- Nov 17, 2021
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- ME AG >90d · 101dME resident >60d · 101d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 8, 2021→ Filed with AG: Nov 17, 2021101d 90 days ME AG >90d Maine Discovered: Aug 8, 2021→ Notified: Nov 17, 2021101d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.