Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

VISTA POINT MORTGAGE, LLC

bd_43869c5bddf6e6f3 · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 21, 2024

Filed

Mar 19, 2025

To disclose

—

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for VISTA POINT MORTGAGE, LLC →3 incidents on file

Vista Point Mortgage, LLC reported a data event in Nebraska involving unauthorized access to two employees' email accounts between May 21 and June 5, 2024. The breach exposed names and Social Security numbers of two Nebraska residents. The company discovered the activity last year, completed a review on January 31, 2025, and sent notices on March 19, 2025. Response included credit monitoring via IDX and enhanced employee safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

May 21, 2024

Begins

May 21, 2024

Discovered

Mar 19, 2025

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_58e5026ce8da81952025-03-19Candidate
California State AGbd_7040248c11b0bfdc2025-03-19Verified

Name: VISTA POINT MORTGAGE, LLC
norm: vista point mortgage
Domain: vistapointmtg.com

Name: VISTA POINT MORTGAGE, LLC
norm: vista point mortgage
Domain: vistapointmtg.com
Industry: Financial Servicesllm

Discovered: May 21, 2024
Breach occurred: May 21, 2024 – Jun 5, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 19, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Provided written notice of this incident to relevant state regulators, as necessary
Initial access: phishing_link

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of Vista Point systems
Identified potentially affected individuals
Provided access to credit monitoring services for one (1) year, through IDX, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice of this incident to relevant state regulators, as necessary, and to the three (3) major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGMar 19 · first

California State AGMar 19 · first

Nebraska State AGMar 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/Vista Point - Notice of Data Event - NE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2025
Raw hash: 47def2be52c184df9d199d71988ce8e10b2714015117d79755d2034bc4a4b550

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityVISTA POINT MORTGAGE, LLC

Victim entityVISTA POINT MORTGAGE, LLC

Incidentdiscovered May 21, 2024

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov