Enova International, Inc.

CNU Online Holdings, LLC dba CashNetUSA reported an external system breach (hacking) occurring between April 19 and May 6, 2023. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs) of 1,181 individuals, including 5 Maine residents. Written notification was sent on May 12, 2023. No identity theft protection services were offered.

On Deck Capital, Inc. reported a data breach affecting 60,307 individuals, including 219 Maine residents. The breach, which occurred on March 10, 2022, was an external system breach (hacking) discovered on May 17, 2022. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. Affected individuals were notified on June 2, 2022, and offered a complimentary 24-month subscription to an identity protection service.

On Deck Capital, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2022-06-03. The breach occurred from 3/10/2022 to 3/17/2022. 179 Montana residents were affected.

On March 10, 2022, On Deck Capital detected suspicious activity on internal computers and took them offline. An unauthorized actor copied data to a private cloud storage account, which OnDeck later secured and disabled. The data included names, SSNs, tax IDs, driver's license/passport numbers, financial account numbers, and medical/health insurance information. OnDeck engaged cybersecurity experts, notified the FBI, reset credentials, and enhanced security controls. Affected individuals were offered two years of identity monitoring.

On Deck Capital, Inc., a finance sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2022-03-10 and filed notice on 2022-06-03. 1,157 Washington residents were affected. 85 days elapsed between awareness and notification. 0 days to identify the breach. 7 days to contain the breach.

On Deck Capital, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-03. The breach occurred during 3/10/2022 - 3/17/2022. The breach was discovered on 5/17/2022. 59,307 individuals were affected. Notice was sent on 6/2/2022.

NetCredit discovered on Feb 20, 2018, that an unauthorized party used valid email addresses and passwords to access a small percentage of accounts. The attacker changed personal information and completed new loan applications. Affected data included names, addresses, last 4 digits of SSN and bank accounts, and employment info. NetCredit blocked the attacker and restricted account access.

CNU Online Holdings, LLC d/b/a Net Credit reported a data breach to the Montana Attorney General. The breach was reported on 2018-03-08. The breach occurred on 2/20/2018. 6 Montana residents were affected.