PennyMac Loan Services, LLC
ent_0377b934a17e809500b353e3
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
8,495
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- PennyMac Loan Services, LLC
- Normalized
- pennymac loan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- California State AGas victim2023-08-28
Sovos Compliance, LLC, a vendor for PennyMac Loan Services, LLC, experienced a security incident on May 30, 2023, when unauthorized actors exploited a previously unknown vulnerability in Progress Software's MOVEit Transfer application. The attackers downloaded a file containing personal information of PennyMac customers. Sovos took the application offline, activated incident response, retained experts, and notified law enforcement. Credit monitoring services are being offered to affected individuals.
- Montana State AGas victim2023-08-21
Sovos Compliance, LLC disclosed a security incident involving its vendor Progress Software's MOVEit Transfer application. Unauthorized actors exploited a previously unknown vulnerability (zero-day) on May 30, 2023, to exfiltrate personal information belonging to customers of PennyMac Loan Services, LLC. Sovos notified PennyMac on July 28, 2023, and offered credit monitoring services.
- Indiana State AGas victim2023-08-18
PennyMac Loan Services LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-27 and was reported on 2023-08-18. 2 Indiana residents were affected. 8,495 individuals affected in total.
Supply-chain cascadesreviewed and confirmed
- PennyMac Loan Services, LLC’s filing is one of at least 97 in the Progress Software Corporation supply-chain incident (2023).