Confirmed breach. Intrusion Feb 22, 2025, discovered Feb 24, 2025 — the first regulatory filing landed 431 days later (flagged late). 3,514 individuals reported across the linked filings.
incident inc_9aa53a8ea9754806 · merge_method human · confidence 100%
Litigation Timing
Supplemental
Notification delay
431days
Discovered → first regulatory filing
Discovery variance
0days
Range of discovered_at dates across filings
Leak precedence
Regulatory clocksMassachusetts✗ MA AG >90dCalifornia✗ CA 60-day late · 458dTexas✗ TX AG >30dFull clock table in Litigation Timeline
Leak SiteState AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedakira
428days
Gap between first leak claim and first regulatory filing
Filing span
456days
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
Affected (total reported)
3,514
Data types
—
Jurisdictions
4
CA MA TX
Linked filings
4
Leak Site · State AG
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Feb 22, 2025
When the intrusion reportedly occurred, per the linked filings
Breach discoveredletter-grounded
Feb 24, 2025
Reported by MASSACHUSETTS AG, CALIFORNIA AG, TEXAS AG filings
IAC offers consumer financing to both the Retail and Direct Sales
market.
We are ready to upload more than 60 GB of essential corporate doc
uments such as: financial data (audits, payment details, reports)
, health condition certificates, inside correspondences, etc.
428 days
Most recent
3 State AG filingsMay 1, 2026 – May 29, 2026ExpandCollapse
MACATX
Massachusetts State AG
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Industrial Acceptance Corporation notified Massachusetts residents of a data breach discovered on February 24, 2025. Unauthorized actors accessed the network, encrypted files, and exfiltrated personal information including names and Social Security numbers. The company took systems offline, engaged cybersecurity specialists, and reported the incident to federal law enforcement. Affected individuals are offered complimentary credit monitoring and identity protection services through Cyberscout/TransUnion. No evidence of misuse was found as of the notice date of May 28, 2026.
MA AG >90dLeak >180d
🐻California State AGlinked via multistate filing link · 100%
Industrial Acceptance Corporation notified Rhode Island residents of a data breach discovered on February 24, 2025. The company became aware of unauthorized activity and took systems offline. On or around March 4, 2025, it was learned that files were taken from the network by an unauthorized actor. A review completed on May 11, 2026, determined that 808 Rhode Island residents' personal information was involved. The company engaged cybersecurity specialists, reported to federal law enforcement, and is offering 12 months of credit monitoring.
Affected (this filing): 808
CA 60-day late · 458dCA AG copy ≤15d · 0d
⭐Texas State AGLeaked → filing gap · 1 yrlinked via multi-signal match · 100%
Industrial Acceptance Corporation based in New Haven, Connecticut, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-02-24 and reported on 2026-05-29. 2,706 Texas residents were affected. 79,216 individuals affected in total. Types of information involved: Social Security Number Information;Driver’s License number. Consumers were notified via U.S. Mail.