PLANET HOME LENDING, LLC
ent_019e227b917b70542103c4d7a051c3a5
Disclosures
20
State AG · Leak Site · 12 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
284,974
nationwide · State AG ME
Leak-site claims
4
unverified actor claims
Identity resolution
- Canonical name
- PLANET HOME LENDING, LLC
- Normalized
- planet home lending— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 54930021WPEXNHYZUL09
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- planethomelending.com
Disclosure history (20)newest first
- Massachusetts State AGas victim2024-02-15
Planet Home Lending LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-15. 2,142 Massachusetts residents were affected.
- South Carolina State AGas victim2024-02-09
Planet Home Lending, LLC notified South Carolina residents of a ransomware incident involving the LockBit threat actor. The attack exploited the 'Citrix Bleed' vulnerability in a Citrix software product on November 15, 2023. The incident resulted in the unauthorized access of a read-only data folder containing customer loan files with PII, including SSNs and financial account numbers. The company engaged forensic investigators, notified the FBI, and offered 24 months of credit monitoring.
- Maine State AGas victim2024-02-09
Planet Home Lending, LLC reported an external system breach that occurred and was discovered on November 15, 2023. The breach affected 272 Maine residents, compromising their names and Social Security numbers. The company provided 24 months of identity theft protection services through Experian IdentityWorks to the affected individuals.
- California State AGas victim2024-02-09
Planet Home Lending, LLC experienced a ransomware attack by the threat actor LockBit on November 15, 2023. The attacker exploited a vulnerability known as 'Citrix Bleed' in Citrix software to gain unauthorized access to a read-only data folder containing customer loan files. Affected data included names, addresses, Social Security numbers, loan numbers, and financial account numbers. The company contained the threat, notified the FBI, and is offering 24 months of credit monitoring to affected individuals.
- Oregon State AGas victim2024-02-09
Planet Home Lending, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2024-02-09. The breach occurred during 11/15/2023 - 11/15/2023. The breach was discovered on 11/15/2023. 284,974 individuals were affected. Notice was sent on 1/25/20242/7/2024.
- Maine State AGas victim2024-01-26
Planet Home Lending, LLC reported an external system breach (hacking) occurring on November 15, 2023, discovered on the same date. The incident affected 199,873 individuals, including 193 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification on January 25, 2024, and offered 24 months of Experian IdentityWorks services.
- Delaware State AGas victim2024-01-25
Planet Home Lending, LLC experienced a ransomware attack by the threat actor LockBit on November 15, 2023. The attacker exploited a vulnerability known as 'Citrix Bleed' in Citrix software to gain unauthorized access to a read-only data folder containing loan files. Affected data included names, addresses, Social Security numbers, loan numbers, and financial account numbers. The company contained the incident, engaged forensic investigators, notified the FBI, and is offering 24 months of credit monitoring to affected individuals.
- Indiana State AGas victim2024-01-25
Planet Home Lending LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-15 and was reported on 2024-01-25. 6,292 Indiana residents were affected. 284,974 individuals affected in total.
- Montana State AGas victim2024-01-24
Planet Home Lending, LLC notified Montana residents of a ransomware incident involving the LockBit threat actor. The attack exploited the 'Citrix Bleed' vulnerability in Citrix software on November 15, 2023. Compromised data included names, addresses, SSNs, loan numbers, and financial account numbers. The company engaged forensic investigators, notified the FBI, and is offering 24 months of credit monitoring.
- Washington State AGas victim2024-01-23
Planet Home Lending, LLC reported a ransomware incident involving the threat actor LockBit on November 15, 2023. The attack exploited the 'Citrix Bleed' vulnerability in a Citrix Systems application. The breach affected 7,194 Washington residents, exposing names, addresses, Social Security numbers, loan numbers, and financial account numbers. Planet notified the FBI, engaged forensic investigators, and offered 24 months of credit monitoring.
- Illinois State AGas victim2024-01-01
PLANET HOME LENDING, LLC filed a data-breach notice with the Illinois Attorney General in January 2024 (case 24-01-047). The register records the breach as discovered on November 15, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2023-11-17
Founded in 2007, Planet Home Lending is a privately held mortgage lender with multiple business channels uniquely positioned to provide competitive products and services.
- GLOBALLeak Siteas victim2023-11-15
Founded in 2007, Planet Home Lending is a privately held mortgage lender with multiple business channels uniquely positioned to provide competitive products and services.
- New Hampshire State AGas victim2023-09-13
Planet Home Lending, LLC notified the NH Attorney General of a data breach resulting from the exploitation of a zero-day vulnerability in the MOVEit file transfer platform. The attack occurred on May 29, 2023, and was discovered on June 1, 2023. The incident compromised loan files containing PII and financial data for 4 New Hampshire residents. Planet engaged forensic investigators, notified law enforcement, applied patches, and offered credit monitoring.
- Massachusetts State AGas victim2023-09-11
Planet Home Lending, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-11. 23 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2023-09-08
Planet Home Lending, LLC reported a data breach affecting 2 Maine residents, part of a larger incident impacting 3,119 individuals. The breach was an external system hack that occurred on May 29, 2023, and was discovered on June 1, 2023. The compromised information included names and Social Security numbers. Affected individuals were notified on August 31, 2023, and offered 12 months of identity theft protection services from IDX. The notification letter indicates the breach was related to the MOVEit software vulnerability.
- Montana State AGas victim2023-08-31
Planet Home Lending, LLC notified Montana residents of a cybersecurity incident involving the MOVEit file transfer platform. Hackers exploited a zero-day vulnerability on May 29, 2023. The company discovered the breach on June 1, 2023, contained the threat, and engaged forensic investigators. Loan files containing PII were compromised. The company notified law enforcement, patched the vulnerability, and offered credit monitoring services.
- Indiana State AGas victim2023-08-31
Planet Home Lending, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-08-31. 75 Indiana residents were affected. 3,119 individuals affected in total.
- GLOBALLeak Siteas victim2023-07-26
Planet Home Lending - We'll Get You Home.
- GLOBALLeak Siteas victim2020-03-25
planethomelending.com