HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDEmploymentFinancial accountMediumContained

AMERISAVE MORTGAGE CORPORATION

bd_33497e5ae821f215 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 12, 2019

Filed

Jan 3, 2020

To disclose

22 days

Affected

8state residents only

Linked

4 filings

Confidence

65%

Full breach record for AMERISAVE MORTGAGE CORPORATION →2 incidents on file

AmeriSave Mortgage Corporation notified Montana residents that unauthorized third parties used stolen credentials to access a business partner's platform between October and November 2019. The incident exposed customer PII including SSNs, DOBs, and financial data. AmeriSave disabled the account and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 72 days

discovery → filing · 22 days

Oct 1, 2019

Begins

Dec 12, 2019

Discovered

Jan 3, 2020

Filed

vs. sector median

6 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_9e8c7e9965af84932020-01-03Verified
Massachusetts State AGbd_4618a8223a8d63382020-01-06 · +3dVerified
Indiana State AGbd_91d85b424cb226312020-01-13 · +10dVerified

Name: AMERISAVE MORTGAGE CORPORATION
norm: amerisave mortgage

Name: AMERISAVE MORTGAGE CORPORATION
norm: amerisave mortgage
Industry: Financial Servicesllm

Discovered: Dec 12, 2019
Breach occurred: Oct 1, 2019 – Nov 30, 2019
Undetected for: 72 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 12, 2020
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDEmploymentFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Third party: via business partner
Initial access: valid_credentials

During the incident: Disabled the compromised account
Undertaking a thorough review of this incident
Offering a complimentary one-year membership of Experian’s IdentityWorks
Changes made: Offering a complimentary one-year membership of Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGJan 3 · first

Montana State AGJan 3 · first · this page

Massachusetts State AG+3d

Indiana State AG+10d

Pattern: first filing Jan 3 (CA), last Jan 13 (IN) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-46.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 3, 2020
Raw hash: 18fffdc25eea6b710461f7579ec6e535d691bb26c80496b6eea1407e296157a8

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAMERISAVE MORTGAGE CORPORATION

Victim entityAMERISAVE MORTGAGE CORPORATION

Incidentdiscovered Dec 12, 2019

Stated responseDisabled the compromised account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov