ON Q FINANCIAL, LLC
ent_a4369c338eebec2f
Disclosures
22
State AG · Leak Site · 12 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
211,650
nationwide · State AG ME
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- ON Q FINANCIAL, LLC
- Normalized
- on q financial— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300SVKVT1EF3U0N48
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- onqfinancial.com
Disclosure history (22)newest first
- Oregon State AGas victim2024-04-11
On Q Financial, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2024-04-11. The breach occurred during 2/20/2024. The breach was discovered on 3/14/2024. Notice was sent on 3/29/2024.
- GLOBALLeak Siteas victim2024-04-06
On Q Financial is a Mortgage Company specializing in new home financing and existing home refinancing.
- South Carolina State AGas victim2024-04-03
On Q Financial, LLC notified South Carolina consumers of a data security incident involving the exfiltration of names and Social Security numbers. The breach stemmed from a vulnerability in ConnectWise ScreenConnect, a remote access tool. On Q Financial patched the vulnerability, engaged forensic investigators, and reported the incident to the FBI. Affected individuals were offered 12 months of credit monitoring and fraud assistance.
- New Hampshire State AGas victim2024-04-03
On Q Financial, LLC notified the New Hampshire Attorney General of a data security incident involving the ConnectWise ScreenConnect vulnerability. The breach allowed an unknown actor to access the network and exfiltrate client personal information. 87 New Hampshire residents were notified on March 29, 2024. The company patched the vulnerability, engaged forensic investigators, and reported the incident to the FBI.
- Massachusetts State AGas victim2024-04-03
On Q Financial reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-04-03. 312 Massachusetts residents were affected.
- Washington State AGas victim2024-04-02
On Q Financial, LLC notified Washington AG of a data breach involving the ConnectWise ScreenConnect vulnerability. Unauthorized access occurred Feb 21-22, 2024, leading to exfiltration of names and SSNs from 18,757 Washington residents. Notification sent March 29, 2024. Remediation included forensic investigation, FBI reporting, and 12 months of credit monitoring.
- California State AGas victim2024-04-02
On Q Financial, LLC notified clients of a data security incident where an unknown individual exploited a vulnerability in ConnectWise's ScreenConnect software to access the company's network on March 14, 2023. The breach was discovered on February 20, 2024, when ConnectWise alerted On Q Financial to the vulnerability. The investigation confirmed that personal information, including names and Social Security numbers, was exfiltrated. On Q Financial patched the vulnerability, engaged forensic investigators, reported the incident to the FBI, and is offering 12 months of credit monitoring and fraud assistance to affected clients.
- Maine State AGas victim2024-04-02
On Q Financial, a financial services provider based in Scottsdale, AZ, reported an external system breach (hacking) occurring on February 21, 2024, discovered on March 14, 2024. The incident compromised the names and Social Security Numbers of approximately 211,650 individuals, including 69 Maine residents. On Q Financial sent written notifications on March 29, 2024, and provided 12 months of credit monitoring and identity remediation services through TransUnion to affected individuals.
- Montana State AGas victim2024-04-02
On Q Financial, LLC notified clients of a data security incident involving the ConnectWise ScreenConnect vulnerability. An unknown individual accessed the network and exfiltrated client names and Social Security numbers. The company patched the vulnerability, engaged forensic investigators, reported to the FBI, and provided 12 months of credit monitoring.
- Illinois State AGas victim2024-04-01
ON Q FINANCIAL, LLC filed a data-breach notice with the Illinois Attorney General in April 2024 (case 24-04-006). The register records the breach as discovered on February 20, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Indiana State AGas victim2024-03-29
On Q Financial reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-21 and was reported on 2024-03-29. 587 Indiana residents were affected. 211,650 individuals affected in total.
- Delaware State AGas victim2024-03-29
On Q Financial, LLC notified clients of a data security incident where an unknown individual accessed their network via a vulnerability in ConnectWise's ScreenConnect software. The intrusion occurred on March 14, 2023, but was discovered on February 20, 2024, when ConnectWise notified On Q Financial of the vulnerability. Client personal information, including names and Social Security numbers, was exfiltrated. On Q Financial patched the vulnerability, engaged forensic investigators, reported the incident to the FBI, and is offering credit monitoring and fraud assistance to affected clients.
- GLOBALLeak Siteas victim2024-02-20
On Q Financial is a Mortgage Company specializing in new home financing and existing home refinancing.
- Massachusetts State AGas victim2021-04-20
On Q Financial, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-20. 262 Massachusetts residents were affected. The report records the breach type as electronic.
- South Carolina State AGas victim2021-04-19
On Q Financial, Inc. reported a data breach in South Carolina where customer data was exposed between Feb 22-23, 2021. The incident involved unauthorized access to backup storage, compromising names, addresses, FICO scores, bank account info, loan info, and SSNs. The company restricted access and offered 12 months of credit monitoring.
- Indiana State AGas victim2021-04-19
On Q Financial reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-22 and was reported on 2021-04-19. 222 Indiana residents were affected. 191,628 individuals affected in total.
- Indiana State AGas victim2021-04-18
On Q Financial, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-22 and was reported on 2021-04-18. 222 Indiana residents were affected. 191,628 individuals affected in total.
- California State AGas victim2021-04-12
On Q Financial, Inc. disclosed a data breach affecting customer data exposed from a backup storage location between February 22 and February 23, 2021. The company determined the exposure on February 24, 2021, and immediately secured the storage location. Affected data included names, addresses, Social Security Numbers, FICO scores, bank account information, and loan information. The company offered 24 months of complimentary credit monitoring through NortonLifeLock.
- Montana State AGas victim2021-04-12
State AG notification from Montana regarding On Q Financial, Inc. The source document is a corrupted binary file (DOCX) containing no readable text. No breach details, dates, or data types could be extracted.
- Oregon State AGas victim2021-04-02
On Q Financial, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2021-04-02. The breach occurred during 2/22/2021 - 2/24/2021. The breach was discovered on 2/24/2021. 191,628 individuals were affected.
- Delaware State AGas victim2021-04-01
On Q Financial, Inc. notified Delaware consumers of a data breach occurring between Feb 22-23, 2021, discovered on Feb 24, 2021. Customer data, including names, addresses, SSNs, FICO scores, and bank account info, was exposed from a backup storage location. On Q restricted access, increased monitoring, and offered 12 months of free credit monitoring via NortonLifeLock.
- Washington State AGas victim2021-03-22
On Q Financial, Inc. notified Washington AG of a data breach affecting 18,066 state residents. Between Feb 22-24, 2021, customer data (names, addresses, SSNs, financial info) was inadvertently transferred to a non-private data container. The breach was discovered on Feb 24, 2021. On Q secured the data, increased monitoring, and offered 12 months of credit monitoring.