Clustered 5 filings across 5 jurisdictions · filed Jun 3, 2022. View entity profile → Other incidents for this victim →
incident inc_1e4f95193a834244 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Financial account · Financial credentials
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA ME MT OR WA
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Mar 10, 2022
When the intrusion reportedly occurred, per the linked filings
Mar 10, 2022
Reported by CALIFORNIA AG, WASHINGTON AG filings
May 17, 2022
Reported by MAINE AG, OREGON AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
On Deck Capital, Inc. reported a data breach affecting 60,307 individuals, including 219 Maine residents. The breach, which occurred on March 10, 2022, was an external system breach (hacking) discovered on May 17, 2022. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. Affected individuals were notified on June 2, 2022, and offered a complimentary 24-month subscription to an identity protection service.
Affected (this filing): 219
On Deck Capital, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2022-06-03. The breach occurred from 3/10/2022 to 3/17/2022. 179 Montana residents were affected.
Affected (this filing): 179
On March 10, 2022, On Deck Capital detected suspicious activity on internal computers and took them offline. An unauthorized actor copied data to a private cloud storage account, which OnDeck later secured and disabled. The data included names, SSNs, tax IDs, driver's license/passport numbers, financial account numbers, and medical/health insurance information. OnDeck engaged cybersecurity experts, notified the FBI, reset credentials, and enhanced security controls. Affected individuals were offered two years of identity monitoring.
On Deck Capital, Inc., a finance sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2022-03-10 and filed notice on 2022-06-03. 1,157 Washington residents were affected. 85 days elapsed between awareness and notification. 0 days to identify the breach. 7 days to contain the breach.
Affected (this filing): 1,157
On Deck Capital, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-03. The breach occurred during 3/10/2022 - 3/17/2022. The breach was discovered on 5/17/2022. 59,307 individuals were affected. Notice was sent on 6/2/2022.
Affected (this filing): 59,307