Social EngineeringFinancial ServicesFinancePhishingBECCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

NEW ENGLAND REGIONAL MORTGAGE CORPORATION

bd_47630f08d59ca551 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 25, 2018

Filed

Oct 15, 2018

To disclose

20 days

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for NEW ENGLAND REGIONAL MORTGAGE CORPORATION →

New England Regional Mortgage Corporation notified the NH Attorney General of a phishing attack on September 25, 2018, where three employee email accounts were compromised. The attack involved a message appearing to come from a legitimate person within the organization, requesting borrowers to accept wiring instructions. Two other accounts had auto-forwarding set up. The company suspended accounts, reset passwords, implemented 2-step verification, and offered credit monitoring to affected consumers. It is unclear if data was accessed, but nonpublic personal information (NPPI) and payment information may have been compromised.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 days

Sep 25, 2018

Begins

Sep 25, 2018

Discovered

Oct 15, 2018

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_ecfcd0d6f9e2f2882018-10-10 · +5dVerified

Name: NEW ENGLAND REGIONAL MORTGAGE CORPORATION
norm: new england regional mortgage
Domain: newenglandregional.com

Name: NEW ENGLAND REGIONAL MORTGAGE CORPORATION
norm: new england regional mortgage
Domain: newenglandregional.com
Industry: Financial Servicesllm

Discovered: Sep 25, 2018
Breach occurred: Sep 25, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 10, 2018
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified NH Department of Justice / Attorney General Gordon MacDonald
Initial access: phishing_link

During the incident: Immediately began an internal investigation
Accounts affected were immediately suspended and reviewed for suspicious activity
Recipients of any suspicious emails sent from the one account were contacted with a message warning them of the malicious intent of the message and to delete it immediately
All passwords for all employee emails were reset
Implemented 2-Step Verification for all employees
Reviewed all available messages within the affected accounts for any NPPI
Notifying the affected consumers of this breach
Offering the affected consumers credit watch protection service for one year paid by New England Regional Mortgage Corp
Changes made: Implemented 2-Step Verification for all employees
Incorporating a thorough review of best practices in regards to electronic security into ongoing employee training program
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 10 · first

New Hampshire State AG+5d · this page

Pattern: first filing Oct 10 (MA), last Oct 15 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-england-regional-mortgage-20181015.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 15, 2018
Raw hash: 6fba3f9e596a7a27ee3c0a0a8c9e12b2938dff45f509330154acf5ce6e4d7694

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNEW ENGLAND REGIONAL MORTGAGE CORPORATION

Victim entityNEW ENGLAND REGIONAL MORTGAGE CORPORATION

Incidentdiscovered Sep 25, 2018

Stated responseImmediately began an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov