Lower
Disclosed Feb 24, 20224 years ago177,301 affectedConfirmed
What is known
| People affected | 177,301 (as reported by the organization) |
|---|---|
| Disclosed | Feb 24, 2022 |
| Discovered | Dec 17, 2021 |
| Happened | Dec 10, 2021 |
| Attack | Ransomware |
| Data exposed | Names, Credentials and tokens |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Loweroag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Loweratg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Lowerattorneygeneral.delaware.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Lowerattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Lowerjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Lowerin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Feb 24, 2022 | 815 |
| Indiana AGresidents of IN | Feb 24, 2022 | 4,428 |
| California AGresidents of CA | May 27, 2022 | |
| Washington AGresidents of WA | May 27, 2022 | 3,806 |
| California AGresidents of CA | Aug 2, 2022 | |
| Oregon DOJresidents of OR | Aug 2, 2022 | 177,301 |
| California AGresidents of CA | Oct 6, 2022 | |
| Delaware DOJresidents of DE | Oct 6, 2022 | 6 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/2022-DB-Year-to-Date-Report-for-Website.pdf · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 177301 · backfill source
- 2026-09-25 · disclosed: 2022-05-27 to 2022-02-24 · backfill source
- 2026-09-25 · sector: other to finance · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2021-12-17 · backfill source
- 2026-09-25 · disclosed: 2022-08-02 to 2022-05-27 · backfill source
- 2026-09-25 · disclosed: 2022-10-06 to 2022-08-02 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.