GLOBALClaimed by EgregorFirst sightinglinked via shared-victim match · 100%
Posted to leak site Oct 15, 2020bd_4bc6fb5649261ccf
Clustered 7 filings across 5 jurisdictions · filing window Oct 15, 2020 → Jul 26, 2021. View entity profile → Other incidents for this victim →
incident inc_419b9fed142b427b · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
CA ME OR SC
Leak Site · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Oct 14, 2020
When the intrusion reportedly occurred, per the linked filings
Oct 14, 2020
Reported by CALIFORNIA AG filing
Oct 15, 2020
Reported by MAINE AG, OREGON AG, CALIFORNIA AG, SOUTH CAROLINA AG filings
Nov 24, 2020
Reported by MAINE AG filing
SN Servicing Corporation, a financial services company, reported a data breach affecting 31 Maine residents. The breach, described as an external system breach (hacking), occurred on October 14, 2020, and was discovered on November 24, 2020. Consumers were notified on January 15, 2021.
SN Servicing Corporation experienced a ransomware attack on or about October 15, 2020. The incident resulted in the exposure of borrower personal information, including names, addresses, loan numbers, and billing/balance data. SN locked down systems, engaged forensic experts, and notified authorities. Remediation included upgrading AI-based security tools and blocking foreign traffic. Credit monitoring was offered to affected individuals.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 31
SN Servicing Corporation, a financial services company, experienced an external system breach on October 15, 2020, which was also the date of discovery. The breach impacted 384 Maine residents and compromised financial account or credit/debit card numbers. The company notified affected individuals on two separate dates, January 15, 2021, and July 8, 2021, and provided them with 12 months of identity theft protection services.
Affected (this filing): 384
SN Servicing Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2021-07-16. The breach occurred during 10/15/2020 - 10/15/2020. The breach was discovered on 10/15/2020. 170,426 individuals were affected. Notice was sent on 1/15/20217/8/2021.
Affected (this filing): 170,426
SN Servicing Corporation discovered unauthorized access to its network on October 15, 2020. An investigation concluded that an unauthorized party exfiltrated files containing sensitive personal information for some borrowers, including names, contact info, dates of birth, SSNs, and loan information. SN terminated access, engaged forensic investigators, and offered complimentary credit monitoring to affected individuals. Notices were sent in April 2021.
SN Servicing Corporation notified South Carolina and other state residents of a cybersecurity incident discovered on October 15, 2020. Unauthorized access to the network resulted in the exfiltration of borrower data, including names, contact info, DOB, SSNs, and loan details. SN terminated access, hired forensic investigators and a data mining vendor, and provided complimentary credit monitoring to affected individuals.