HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountPHIHighContained

CALIBER HOME LOANS, INC.

bd_06b0b6413ee36390 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 14, 2017

Filed

Jun 22, 2017

To disclose

14 weeks

Affected

20,437state residents only

Linked

5 filings

Confidence

68%

Full breach record for CALIBER HOME LOANS, INC. →

Caliber Home Loans, Inc. reported an unauthorized access incident affecting approximately 20,437 Washington residents. Discovered on March 14, 2017, the breach involved access to electronically-stored loan files containing PII (SSN, driver's license, DOB) and financial account data. Caliber engaged forensic experts, notified law enforcement, and began mailing notifications on June 23, 2017, offering two years of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 100 days

Mar 14, 2017

Discovered

Jun 22, 2017

Filed

vs. sector median

+5 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_867d4e46a400880c2017-06-22Verified
Massachusetts State AGbd_48f163cbb04c1e892017-06-23 · +1dVerified
Oregon State AGbd_4e69be7c103d04e62017-06-23 · +1dVerified
Montana State AGbd_722ef9deafea20002017-06-23 · +1dVerified

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: CALIBER HOME LOANS, INC.
norm: caliber home loans
Industry: Financial Servicesllm

Discovered: Mar 14, 2017
Materiality determined: —
Notification sent: Jun 23, 2017
Affected individuals: 20,437state-resident count only
Data types: Government IDIdentity (basic)Financial accountPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: contacted law enforcement and will continue to cooperate in their investigation of this incident

During the incident: Engaged outside forensic experts to assist in investigating and remedying the situation
Reviewing its security policies and configuring and updating its systems to improve their security
Contacted law enforcement and will continue to cooperate in their investigation of this incident
Changes made: Configuring and updating its systems to improve their security
Reviewing its security policies
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJun 22 · first

Washington State AGJun 22 · first · this page

Massachusetts State AG+1d

Oregon State AG+1d

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 22, 2017
Raw hash: aff63aef98f3211c04899d3340012cf8403e241824c2a0ebd8108401294e0a47

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityNorton Rose Fulbright US LLP

Victim entityCALIBER HOME LOANS, INC.

Incidentdiscovered Mar 14, 2017

Stated responseEngaged outside forensic experts to assist in investigating and remedying the situation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com