ON Q FINANCIAL, LLC

ent_a4369c338eebec2f

Compliance scorecard →🔔 Follow entity

Disclosures

State AG · Leak Site · 9 jurisdictions

Incidents

filings grouped by incident

Max affected reported

211,650

nationwide · State AG ME

Leak-site claims

unverified actor claims

Identity resolution

Canonical name: ON Q FINANCIAL, LLC
Normalized: on q financial— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300SVKVT1EF3U0N48
SEC EDGAR CIK: None — not an SEC registrant
Domain: onqfinancial.com

Disclosure history (16)newest first

🦫Oregon State AGas victim2024-04-11
On Q Financial, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2024-04-11. The breach occurred during 2/20/2024. The breach was discovered on 3/14/2024. Notice was sent on 3/29/2024.
GLOBALLeak Siteas victim2024-04-06
On Q Financial is a Mortgage Company specializing in new home financing and existing home refinancing.
⛰️New Hampshire State AGas victim2024-04-03
On Q Financial, LLC notified the New Hampshire Attorney General of a data security incident involving the ConnectWise ScreenConnect vulnerability. The breach allowed an unknown actor to access the network and exfiltrate client personal information. 87 New Hampshire residents were notified on March 29, 2024. The company patched the vulnerability, engaged forensic investigators, and reported the incident to the FBI.
🌲Washington State AGas victim2024-04-02
On Q Financial, a finance sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2024-02-28 and filed notice on 2024-04-02. 18,757 Washington residents were affected. 34 days elapsed between awareness and notification. 7 days to identify the breach. 0 days to contain the breach.
🐻California State AGas victim2024-04-02
On Q Financial, LLC notified clients of a data security incident where an unknown individual exploited a vulnerability in ConnectWise's ScreenConnect software to access the company's network on March 14, 2023. The breach was discovered on February 20, 2024, when ConnectWise alerted On Q Financial to the vulnerability. The investigation confirmed that personal information, including names and Social Security numbers, was exfiltrated. On Q Financial patched the vulnerability, engaged forensic investigators, reported the incident to the FBI, and is offering 12 months of credit monitoring and fraud assistance to affected clients.
🦞Maine State AGas victim2024-04-02
On Q Financial, a financial services provider based in Scottsdale, AZ, reported an external system breach (hacking) occurring on February 21, 2024, discovered on March 14, 2024. The incident compromised the names and Social Security Numbers of approximately 211,650 individuals, including 69 Maine residents. On Q Financial sent written notifications on March 29, 2024, and provided 12 months of credit monitoring and identity remediation services through TransUnion to affected individuals.
🦬Montana State AGas victim2024-04-02
Q Financial, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-04-02. The breach occurred on 2/20/2024. 132 Montana residents were affected.
🏎️Indiana State AGas victim2024-03-29
On Q Financial reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-21 and was reported on 2024-03-29. 587 Indiana residents were affected. 211,650 individuals affected in total.
💎Delaware State AGas victim2024-03-29
On Q Financial, LLC notified clients of a data security incident involving a vulnerability in ConnectWise ScreenConnect. The vulnerability allowed an unknown individual to access the network and exfiltrate client names and Social Security numbers. On Q Financial patched the vulnerability, engaged forensic investigators, reported the incident to the FBI, and provided 12 months of credit monitoring services to affected clients.
💎Delaware State AGas victim2024-03-29
On Q Financial, Inc. disclosed a data breach occurring between Feb 22-23, 2021, discovered on Feb 24, 2021. Customer data, including names, addresses, SSNs, FICO scores, and bank account info, was exposed from a backup storage location. On Q secured the storage, increased monitoring, and offered 12 months of credit monitoring via NortonLifeLock.
GLOBALLeak Siteas victim2024-02-20
On Q Financial is a Mortgage Company specializing in new home financing and existing home refinancing.
🐻California State AGas victim2021-04-12
On Q Financial, Inc. reported a data breach involving customer data exposed from a backup storage location between Feb 22-23, 2021. The incident compromised names, addresses, FICO scores, bank account info, loan info, and SSNs. On Q Financial secured the storage, increased monitoring, and offered 24 months of credit monitoring via NortonLifeLock.
🦬Montana State AGas victim2021-04-12
On Q Financial, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2021-04-12. The breach occurred from 2/22/2021 to 2/24/2021. 51 Montana residents were affected.
🦫Oregon State AGas victim2021-04-02
On Q Financial, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2021-04-02. The breach occurred during 2/22/2021 - 2/24/2021. The breach was discovered on 2/24/2021. 191,628 individuals were affected.
💎Delaware State AGas victim2021-04-01
On Q Financial, Inc. notified Delaware consumers of a data breach occurring between Feb 22-23, 2021, discovered on Feb 24, 2021. Customer data, including names, addresses, SSNs, FICO scores, and bank account info, was exposed from a backup storage location. On Q restricted access, increased monitoring, and offered 12 months of free credit monitoring via NortonLifeLock.
🌲Washington State AGas victim2021-03-22
On Q Fiancial, Inc., a finance sector entity reported a theft or mistake incident to the Washington Attorney General. The organization became aware of the incident on 2021-02-24 and filed notice on 2021-03-22. 18,066 Washington residents were affected. 26 days elapsed between awareness and notification. 2 days to identify the breach. 0 days to contain the breach.