AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancialMediumResolved

Wyndham Capital Mortgage, Inc.

bd_6aaeaccce23227b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2020

Filed

Oct 16, 2020

To disclose

28 days

Affected

84state residents only

Linked

9 filings

Confidence

66%

Full breach record for Wyndham Capital Mortgage, Inc. →2 incidents on file

Wyndham Capital Mortgage, Inc. notified Montana residents of a data breach on September 18, 2020, caused by user error. An email containing names, SSNs, email addresses, and loan data was sent to the wrong recipient. No evidence of misuse was found. The company offered one year of credit monitoring and identity theft insurance.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Sep 18, 2020

Begins

Sep 18, 2020

Discovered

Oct 16, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

California State AGbd_13335c5e0f27c9da2020-10-16Verified
Indiana State AGbd_528ab8d4039f82242020-10-16Verified
Oregon State AGbd_953367431d1c40dd2020-10-16Verified
New Hampshire State AGbd_ae2039eef24cef912020-10-16Verified

Show 4 more filings ↓up to 52d gap

Washington State AGbd_cc2233e97e912c032020-10-16Verified
Massachusetts State AGbd_a1819141a7839c822020-10-20 · +4dVerified
New Hampshire State AGbd_59d707efcd3f49532020-10-23 · +7dVerified
Indiana State AGbd_5b57becafb3988572020-08-25 · +52dVerified

Name: Wyndham Capital Mortgage, Inc.
norm: wyndham capital mortgage

Name: Wyndham Capital Mortgage, Inc.
norm: wyndham capital mortgage
Industry: Financial Servicesllm

Discovered: Sep 18, 2020
Breach occurred: Sep 18, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 84state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1535 Untrusted Website

During the incident: Attempted recall of the email
Provided additional training to employees
Strengthen system controls and monitoring
Offering one (1) year of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Put additional protections in place
Provided additional training to employees
Continue to strengthen our system controls and monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Indiana State AGAug 25 · first

California State AG+52d

Indiana State AG+52d

Oregon State AG+52d

New Hampshire State AG+52d

Washington State AG+52d

Montana State AG+52d · this page

Massachusetts State AG+56d

New Hampshire State AG+59d

Pattern: first filing Aug 25 (IN), last Oct 23 (NH) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/WCM-General.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2020
Raw hash: f66bea0e5874ae06829cbc6cff0f9163bc37968b34260c6c1a4124bde9f2aaf1

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityWyndham Capital Mortgage, Inc.

Victim entityWyndham Capital Mortgage, Inc.

Incidentdiscovered Sep 18, 2020

Stated responseAttempted recall of the email

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov