Anchor Loans, LP

On February 22, 2021, Anchor Loans, LP fell victim to a ransomware attack, compromising sensitive personal information of individuals, including names, driver’s license numbers, and Social Security numbers. The incident was formally reported to the California Office of the Attorney General on May 7, 2021, with confirmation that at least one affected individual resided in Rhode Island. While the attack targeted a limited number of individuals, the exposure of such highly sensitive data particularly Social Security numbers poses severe risks, including identity theft, financial fraud, and long-term reputational harm to the company. The delay in public disclosure (nearly three months) may have further exacerbated potential damages, as affected parties remained unaware of the breach during this period. The nature of the attack, involving ransomware, suggests that threat actors likely encrypted critical systems and demanded payment for data restoration, though the report does not specify whether a ransom was paid or if data was exfiltrated beyond the confirmed leaks.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-540679

TPRM report: https://www.rankiteo.com/company/anchor-loans

"id": "anc1040090625",
"linkid": "anchor-loans",
"type": "Ransomware",
"date": "2/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'limited number (including at '
                                              'least one Rhode Island '
                                              'resident)',
                        'industry': 'financial services (mortgage lending)',
                        'location': 'California, USA',
                        'name': 'Anchor Loans, LP',
                        'type': 'company'}],
 'data_breach': {'number_of_records_exposed': 'limited',
                 'personally_identifiable_information': ['names',
                                                         "driver's license "
                                                         'numbers',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personally identifiable '
                                              'information (PII)']},
 'date_detected': '2021-02-22',
 'date_publicly_disclosed': '2021-05-07',
 'description': 'The California Office of the Attorney General reported that '
                'Anchor Loans, LP experienced a ransomware attack on February '
                '22, 2021, affecting personal information including names, '
                "driver's license numbers, and Social Security numbers. The "
                'breach was reported on May 7, 2021, and involved a limited '
                'number of individuals, including at least one resident from '
                'Rhode Island.',
 'impact': {'data_compromised': ['names',
                                 "driver's license numbers",
                                 'Social Security numbers'],
            'identity_theft_risk': 'high'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Ransomware Attack on Anchor Loans, LP',
 'type': 'ransomware'}