HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Overby-Seawell Company
bd_67031eb717a26f3c · schema v1 · pii pii-v1
Full breach record for Overby-Seawell Company →Overby-Seawell Company (OSC), a property insurance validation vendor, notified affected individuals of a data breach involving unauthorized access to OSC servers. Unauthorized access began on May 26, 2022, and was discovered on July 5, 2022. Stolen data included names, SSNs, loan details, and insurance information. OSC engaged forensic specialists, reported to law enforcement, and offered 24 months of credit monitoring. Fulton Bank systems were not impacted.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_d99714d71dcc32ecNew Hampshire State AGfiled 2022-08-30Verified
- bd_939f65abcb109caaMaine State AGfiled 2022-09-09(10d gap)Candidate
- bd_56b8b28ee38699dbNew Hampshire State AGfiled 2022-11-01(63d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/09/SAMPLE-LETTER-ALL-PORTALS_OSC-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 30, 2022
- Raw hash
- db2ca8deab53daefdc4e500444c191f0ae6c3d7802e83a9598a9ca99f26ad1bc
Reporting entity
- Name
- Overby-Seawell Companynorm: overby seawell
Victim entity
- Name
- Overby-Seawell Companynorm: overby seawell
Incident
- Discovered
- Jul 5, 2022
- Materiality determined
- —
- Notification sent
- Aug 30, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.