Credit Acceptance Corporation notified the Maryland Attorney General of a security event involving an insider agent who used valid customer account access to solicit unauthorized payments via text message. The incident affected 3 Maryland consumers between December 3 and 11, 2024. The agent was terminated, and no sensitive data (SSN, bank info) was accessed.
Affected (this filing): 3