PrimeLending, A PlainsCapital Company

The Maine Office of the Attorney General reported on April 2, 2021, that PrimeLending, A PlainsCapital Company, experienced a data breach involving unauthorized access to an employee’s email account between November 26, 2020, and December 3, 2020. A total of 1,455 individuals were affected, including the personal information of five Maine residents, such as names, Social Security numbers, and financial account numbers. PrimeLending offered a complimentary one-year membership in credit monitoring and identity theft protection services to those affected.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/acaf86fa-e9f8-414b-a617-6fd31317a937.shtml

TPRM report: https://www.rankiteo.com/company/primelending

"id": "pri515080525",
"linkid": "primelending",
"type": "Breach",
"date": "11/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1455,
                        'industry': 'Finance',
                        'name': 'PrimeLending, A PlainsCapital Company',
                        'type': 'Financial Services'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 1455,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Financial account numbers']},
 'date_detected': '2021-04-02',
 'date_publicly_disclosed': '2021-04-02',
 'description': 'Unauthorized access to an employee’s email account at '
                'PrimeLending, A PlainsCapital Company, resulting in the '
                'compromise of personal information of 1,455 individuals.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Financial account numbers']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2021-04-02',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['Complimentary one-year membership in '
                                       'credit monitoring and identity theft '
                                       'protection services']},
 'title': 'PrimeLending Data Breach',
 'type': 'Data Breach'}