AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Wyndham Capital Mortgage, Inc.

bd_13335c5e0f27c9da · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2020

Filed

Oct 16, 2020

To disclose

28 days

Affected

Not disclosed

Linked

9 filings

Confidence

65%

Full breach record for Wyndham Capital Mortgage, Inc. →2 incidents on file

Wyndham Capital Mortgage, Inc. experienced a user error on September 18, 2020, resulting in an email containing personal information (name, SSN, email, loan data) being sent to an unintended recipient. The company attempted to recall the email, provided employee training, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Sep 18, 2020

Begins

Sep 18, 2020

Discovered

Oct 16, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_528ab8d4039f82242020-10-16Verified
Montana State AGbd_6aaeaccce23227b42020-10-16Candidate
Oregon State AGbd_953367431d1c40dd2020-10-16Verified
New Hampshire State AGbd_ae2039eef24cef912020-10-16Verified

Show 4 more filings ↓up to 52d gap

Washington State AGbd_cc2233e97e912c032020-10-16Verified
Massachusetts State AGbd_a1819141a7839c822020-10-20 · +4dVerified
New Hampshire State AGbd_59d707efcd3f49532020-10-23 · +7dVerified
Indiana State AGbd_5b57becafb3988572020-08-25 · +52dVerified

Name: Wyndham Capital Mortgage, Inc.
norm: wyndham capital mortgage

Name: Wyndham Capital Mortgage, Inc.
norm: wyndham capital mortgage
Industry: Financial Servicesllm

Discovered: Sep 18, 2020
Breach occurred: Sep 18, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown

During the incident: Attempted recall of the email
Provided additional training to employees
Strengthened system controls and monitoring
Offered one (1) year of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Put additional protections in place to keep this from happening again
Provided additional training to employees
Continue to strengthen system controls and monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGAug 25 · first

Indiana State AG+52d

Montana State AG+52d

Oregon State AG+52d

New Hampshire State AG+52d

Washington State AG+52d

California State AG+52d · this page

Massachusetts State AG+56d

New Hampshire State AG+59d

Pattern: first filing Aug 25 (IN), last Oct 23 (NH) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-195226
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2020
Raw hash: eb406e5496a5117dd4d309f2e97a6b70be18c98d470f3b60c521d71cb2bff5e2

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityWyndham Capital Mortgage, Inc.

Victim entityWyndham Capital Mortgage, Inc.

Incidentdiscovered Sep 18, 2020

Stated responseAttempted recall of the email

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov