LENDUS, LLC
ent_019e225c355f0a84804b8bd1f9795848
Disclosures
9
State AG · 7 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
23,105
as filed · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- LENDUS, LLC
- Normalized
- lendus— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300QU7HWSPH011Y56
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- ⭐Texas State AGas victim2026-07-17
YouLend US LLC based in Atlanta, Georgia, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-06-09 and reported on 2026-07-17. 2,793 Texas residents were affected. 23,105 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via U.S. Mail.
- 🦫Oregon State AGas victim2026-07-15
YouLend US LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2026-07-15. The breach occurred during 6/5/2026, 6/9/2026. The breach was discovered on 6/9/2026. 23,105 individuals were affected. Notice was sent on 7/15/2026.
- 🐻California State AGas victim2026-07-15
YouLend US LLC notified the California AG of unauthorized access to its network between June 5 and June 9, 2026. The company detected the disruption on June 9, 2026. Personal information including names, dates of birth, and Social Security numbers was acquired. The company engaged cybersecurity specialists, secured systems, and reported to law enforcement. Credit monitoring is being offered to affected individuals.
- 🐻California State AGas victim2022-01-19
LendUS, LLC notified California residents of unauthorized access to employee email accounts between February 2, 2021 and March 22, 2021. The investigation, completed with a cybersecurity firm, could not confirm whether emails or attachments were accessed or downloaded but could not rule it out. On December 21, 2021, LendUS determined that emails or attachments may have contained personal information. Affected individuals were offered one year of complimentary Equifax Complete Premier credit monitoring.
- ⛰️New Hampshire State AGas victim2022-01-19
LendUS, LLC notified the New Hampshire Attorney General of a security incident involving unauthorized access to employee email accounts between February 2 and March 22, 2021. The breach affected two New Hampshire residents, exposing names, Social Security numbers, financial account numbers, and/or payment card numbers. LendUS discovered the incident on December 21, 2021, and began notifying affected individuals on January 19, 2022. Remediation included password resets, multi-factor authentication, and security awareness training. Affected individuals received one year of credit monitoring via Equifax.
- 🌲Washington State AGas victim2022-01-19
LendUS, LLC, a finance sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2021-12-21 and filed notice on 2022-01-19. 696 Washington residents were affected. 29 days elapsed between awareness and notification. 322 days to identify the breach. 0 days to contain the breach.
- 🦫Oregon State AGas victim2022-01-19
LendUS, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-01-19. The breach occurred during 2/2/2021 - 3/22/2021. The breach was discovered on 12/21/2021. 12,205 individuals were affected. Notice was sent on 1/19/2022.
- 🦬Montana State AGas victim2022-01-19
LendUS, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2022-01-19. The breach occurred from 2/2/2021 to 3/22/2021. 560 Montana residents were affected.
- 🦞Maine State AGas victim2022-01-19
LendUS, LLC experienced a phishing incident on February 2, 2021, which was discovered on December 21, 2021. The breach affected 3 Maine residents, compromising their names and Social Security numbers. The company provided written notification to affected individuals on January 19, 2022, and offered one year of credit monitoring, fraud consultation, and identity theft restoration services.