Nations Lending Corporation

In May 2022, Nations Lending Corporation fell victim to a ransomware attack that resulted in a significant data breach, compromising the personal and financial information of 4,121 individuals, including 22 Maine residents. The exposed data included names, addresses, Social Security numbers, email addresses, and financial account numbers highly sensitive details that elevate the risk of identity theft and financial fraud. In response, the company offered one year of credit monitoring and identity theft protection services to affected individuals. The breach underscores the severe consequences of ransomware-driven data exfiltration, particularly when financial records are involved, posing long-term reputational, operational, and legal risks for the organization.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/99240827-08aa-4c17-a9d0-ebdd1bfacf27.shtml

TPRM report: https://www.rankiteo.com/company/nations-companies

"id": "nat434082825",
"linkid": "nations-companies",
"type": "Ransomware",
"date": "5/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 4121,
                        'industry': 'financial services / mortgage lending',
                        'name': 'Nations Lending Corporation',
                        'type': 'corporation'}],
 'customer_advisories': ['identity theft protection services offered',
                         'one year of credit monitoring provided'],
 'data_breach': {'number_of_records_exposed': 4121,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal information',
                                              'financial information']},
 'date_publicly_disclosed': '2022-06-27',
 'description': 'The Maine Office of the Attorney General reported that '
                'Nations Lending Corporation experienced a data breach '
                'involving a ransomware attack in May 2022. The breach '
                'affected 4,121 individuals, including 22 residents from '
                'Maine, and involved personal financial information such as '
                'names, addresses, Social Security numbers, email addresses, '
                'and financial account numbers. Identity theft protection '
                'services, including one year of credit monitoring, were '
                'offered to affected individuals.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'email addresses',
                                 'financial account numbers'],
            'identity_theft_risk': 'high',
            'payment_information_risk': 'high'},
 'references': [{'date_accessed': '2022-06-27',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'law_enforcement_notified': True,
              'recovery_measures': ['offered identity theft protection '
                                    'services',
                                    'one year of credit monitoring for '
                                    'affected individuals']},
 'title': 'Nations Lending Corporation Ransomware Attack and Data Breach',
 'type': ['ransomware', 'data breach']}