ON DECK CAPITAL, INC.
ent_019e2337546a7e6467943662121aa45d
Disclosures
8
State AG · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
60,307
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- ON DECK CAPITAL, INC.
- Normalized
- on deck— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300LGZVH7SGJZLE03
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- Enova International, Inc.— per SEC Exhibit 21 filing
Disclosure history (8)newest first
- Maine State AGas victim2022-06-03
On Deck Capital, Inc. reported a data breach affecting 60,307 individuals, including 219 Maine residents. The breach, which occurred on March 10, 2022, was an external system breach (hacking) discovered on May 17, 2022. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. Affected individuals were notified on June 2, 2022, and offered a complimentary 24-month subscription to an identity protection service.
- Massachusetts State AGas victim2022-06-03
On Deck Capital, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-06-03. 1,191 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2022-06-03
On Deck Capital, Inc. notified Montana residents of a data breach where an unauthorized actor accessed internal computers and exfiltrated data to a private cloud account. The incident, detected on March 10, 2022, involved personal information including SSNs, driver's licenses, financial account numbers, and medical/health insurance data. OnDeck engaged forensic experts, notified the FBI, contained the breach, and offered two years of Experian IdentityWorks monitoring to affected individuals.
- California State AGas victim2022-06-03
On March 10, 2022, On Deck Capital detected suspicious activity on internal computers and took them offline. An unauthorized actor copied data to a private cloud storage account, which OnDeck later secured and disabled. The data included names, SSNs, tax IDs, driver's license/passport numbers, financial account numbers, and medical/health insurance information. OnDeck engaged cybersecurity experts, notified the FBI, reset credentials, and enhanced security controls. Affected individuals were offered two years of identity monitoring.
- Washington State AGas victim2022-06-03
On Deck Capital, Inc. reported a cyberattack discovered on March 10, 2022, involving unauthorized access to internal computers and exfiltration of data to a private cloud account. The incident affected 1,157 Washington residents, exposing PII including SSNs, driver's licenses, financial account numbers, and health insurance info. The company engaged forensic experts, notified the FBI, contained the breach, and offered 24 months of credit monitoring.
- Oregon State AGas victim2022-06-03
On Deck Capital, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-03. The breach occurred during 3/10/2022 - 3/17/2022. The breach was discovered on 5/17/2022. 59,307 individuals were affected. Notice was sent on 6/2/2022.
- Indiana State AGas victim2022-06-02
On Deck Capital, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-03-10 and was reported on 2022-06-02. 839 Indiana residents were affected. 59,307 individuals affected in total.
- Illinois State AGas victim2022-01-01
ON DECK CAPITAL filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-375). The register records the breach as discovered on March 10, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.