On Q Financial, LLC

The Washington State Office of the Attorney General reported a data breach involving On Q Financial on April 2, 2024. The breach occurred on February 21, 2024, resulting from a cyberattack involving a vulnerability in the ConnectWise software, potentially affecting the personal information of 18,757 Washington residents, including names and Social Security numbers.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=16716

TPRM report: https://www.rankiteo.com/company/on-q-home-loans

"id": "on-530072525",
"linkid": "on-q-home-loans",
"type": "Vulnerability",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 18757,
                        'industry': 'Finance',
                        'location': 'Washington',
                        'name': 'On Q Financial',
                        'type': 'Financial Services'}],
 'attack_vector': 'Vulnerability Exploitation',
 'data_breach': {'number_of_records_exposed': 18757,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers']},
 'date_detected': '2024-02-21',
 'date_publicly_disclosed': '2024-04-02',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving On Q Financial on April 2, 2024. The '
                'breach occurred on February 21, 2024, resulting from a '
                'cyberattack involving a vulnerability in the ConnectWise '
                'software, potentially affecting the personal information of '
                '18,757 Washington residents, including names and Social '
                'Security numbers.',
 'impact': {'data_compromised': ['names', 'Social Security numbers']},
 'references': [{'date_accessed': '2024-04-02',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach at On Q Financial',
 'type': 'Data Breach',
 'vulnerability_exploited': 'ConnectWise software vulnerability'}