CITYWIDE HOME LOANS, LLC

Citywide Home Loans, LLC experienced an external system breach that occurred between November 18, 2020, and December 2, 2020. The breach was discovered on November 29, 2020. The incident affected 220,275 individuals, compromising names and financial account information, including credit/debit card numbers with their security codes or PINs. The company began notifying affected individuals on February 12, 2021, and offered 24 months of credit monitoring and identity restoration services through Kroll.

Citywide Home Loans, LLC submitted a supplemental notification to the New Hampshire Attorney General regarding a ransomware incident. The breach involved unauthorized access via stolen employee credentials through a VPN gateway on or about November 18, 2020. The attacker deployed ransomware, encrypting servers, and exfiltrated data (names, SSNs, financial info) to Mega cloud storage. 54 New Hampshire residents were identified as affected. Notifications began February 12, 2021. Citywide engaged forensic experts, law enforcement, and offered credit monitoring.

Citywide Home Loans, LLC reported a ransomware incident affecting 2,407 Washington residents. Unauthorized access occurred via stolen employee credentials on Nov 18, 2020. Ransomware encrypted servers, and data was exfiltrated to Mega. Data included PII, SSNs, financial info, and health plan data. Notifications began Feb 12, 2021. Remediation included moving to cloud, password resets, and enhanced controls.

Citywide Home Loans, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-19. The breach occurred during 11/18/2020 - 12/2/2020. The breach was discovered on 11/29/2020. 220,245 individuals were affected. Notice was sent on 2/12/20213/19/2021.

Citywide Home Loans, LLC reported an external system breach that occurred between November 18, 2020, and December 2, 2020. The breach was discovered on November 29, 2020. The incident affected 131 Maine residents, and compromised their names in combination with financial account numbers or credit/debit card numbers along with security codes or PINs. The company offered 24 months of credit monitoring and identity restoration services through Kroll.

Citywide Home Loans, LLC disclosed that an unauthorized person gained remote access to its computer network between November 18 and December 2, 2020. The company discovered the incident on November 29, 2020. Affected data may include names, addresses, phone numbers, and dates of birth. The company contained the threat, engaged third-party cybersecurity experts, contacted law enforcement, and offered two years of identity monitoring services via Kroll.

Citywide Home Loans, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2020-11-18 and was reported on 2021-02-12. 289 Indiana residents were affected. 220,275 individuals affected in total.

Citywide Home Loans, LLC disclosed that on November 29, 2020, an unauthorized person gained remote access to its computer network. The incident involved personal information including names, addresses, phone numbers, and dates of birth. Citywide eliminated unauthorized access, engaged law enforcement and third-party experts (Kroll), and provided two years of complimentary identity monitoring services to affected individuals.

Citywide Home Loans, LLC reported a data breach to the Maine Attorney General, indicating that an external system breach involving malware and ransomware occurred on November 18, 2020. The breach was discovered on November 29, 2020. Five Maine residents were affected, part of a larger group of 16,615 individuals. The compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on February 12, 2021, and offered 24 months of credit monitoring and identity theft restoration services through Kroll.

Citywide Home Loans, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-11. 131 Massachusetts residents were affected. The report records the breach type as electronic.

CITYWIDE HOME LOANS, LLC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-140). The register records the breach as discovered on November 29, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.