HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Lyon Real Estate
bd_3fd1dc8854222820 · schema v1 · pii pii-v1
Full breach record for Lyon Real Estate →Lyon Real Estate notified 2 New Hampshire residents of a data breach occurring between April 18 and May 4, 2023. An unknown actor exploited a software vulnerability in a vendor application to access systems. Affected data included names, SSNs, and financial account numbers. Lyon engaged third-party specialists, reported to federal law enforcement, and provided credit monitoring via Equifax.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3e536f8381d828b6California State AGfiled 2023-09-06Verified
- bd_6401fa3db6bda0ebMontana State AGfiled 2023-09-06Candidate
- bd_eabed48a437241c4Maine State AGfiled 2023-09-06Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/lyon-real-estate-20230906.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 6, 2023
- Raw hash
- 4df94571bbf0b40518b068b440017b220fd33ba2c68bb2ceaa292df98ff79e0f
Reporting entity
- Name
- Lyon Real Estatenorm: lyon real estate
Victim entity
- Name
- Lyon Real Estatenorm: lyon real estate
Incident
- Discovered
- May 4, 2023
- Materiality determined
- —
- Notification sent
- Sep 6, 2023
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- reported the event to federal law enforcementproviding written notice of this event to appropriate state regulators and to the three major consumer reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.