SN Servicing Corporation
ent_019e22c76d70d42b0c39d497a8ac9157
Disclosures
11
State AG · Leak Site · 9 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
170,426
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- SN Servicing Corporation
- Normalized
- sn servicing— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 2549004BE74TW6H5B156
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Security National Master Holding— as stated in the breach filing
Disclosure history (11)newest first
- South Carolina State AGas victim2021-07-26
SN Servicing Corporation notified South Carolina and other state residents of a cybersecurity incident discovered on October 15, 2020. Unauthorized access to the network resulted in the exfiltration of borrower data, including names, contact info, DOB, SSNs, and loan details. SN terminated access, hired forensic investigators and a data mining vendor, and provided complimentary credit monitoring to affected individuals.
- Maine State AGas victim2021-07-16
SN Servicing Corporation, a financial services company, experienced an external system breach on October 15, 2020, which was also the date of discovery. The breach impacted 384 Maine residents and compromised financial account or credit/debit card numbers. The company notified affected individuals on two separate dates, January 15, 2021, and July 8, 2021, and provided them with 12 months of identity theft protection services.
- Oregon State AGas victim2021-07-16
SN Servicing Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2021-07-16. The breach occurred during 10/15/2020 - 10/15/2020. The breach was discovered on 10/15/2020. 170,426 individuals were affected. Notice was sent on 1/15/20217/8/2021.
- California State AGas victim2021-07-16
SN Servicing Corporation discovered unauthorized access to its network on October 15, 2020. An investigation concluded that an unauthorized party exfiltrated files containing sensitive personal information for some borrowers, including names, contact info, dates of birth, SSNs, and loan information. SN terminated access, engaged forensic investigators, and offered complimentary credit monitoring to affected individuals. Notices were sent in April 2021.
- California State AGas victim2021-01-29
SN Servicing Corporation experienced a ransomware attack on October 15, 2020. The incident resulted in the exposure of personal information for some borrowers, including names, addresses, loan numbers, and billing information from March 2018 statements. The company locked down systems, engaged forensic experts, and notified authorities. Affected individuals were offered one year of credit monitoring.
- Massachusetts State AGas victim2021-01-26
SN Servicing Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-01-26. 136 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2021-01-15
SN Servicing Corporation, a financial services company, reported a data breach affecting 31 Maine residents. The breach, described as an external system breach (hacking), occurred on October 14, 2020, and was discovered on November 24, 2020. Consumers were notified on January 15, 2021.
- New Hampshire State AGas victim2021-01-15
SN Servicing Corporation, a subsidiary of Security National Master Holding Company, LLC, disclosed a ransomware incident involving the Mount Locker threat actor. The attack occurred on or about October 14-15, 2020, and was discovered on October 15, 2020. The incident resulted in the exfiltration of borrower billing statements containing names, addresses, loan numbers, and balance information. At least 8 New Hampshire residents were affected. SN notified the FBI, engaged forensic investigators, and mailed notification letters on January 15, 2021. Remediation included upgrading security tools and blocking foreign traffic.
- Indiana State AGas victim2021-01-15
SN Servicing Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2020-10-14 and was reported on 2021-01-15. 787 Indiana residents were affected. 20,155 individuals affected in total.
- Illinois State AGas victim2021-01-01
SN SERVICING CORPORATION filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-017). The register records the breach as discovered on October 15, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2020-10-15