HackingFinancial ServicesFinanceStolen CredentialsData MishandlingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Multi-Stage ChainFinancial accountHealth (basic)Identity (basic)Government IDPHIMediumContained

Stanwich Mortgage Loan Trust B

bd_70e09c3d80b9c538 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 15, 2019

Filed

Feb 12, 2019

To disclose

28 days

Affected

702state residents only

Linked

3 filings

Confidence

68%

Full breach record for Stanwich Mortgage Loan Trust B →

Stanwich Mortgage Loan Trust and vendor OpticsML experienced unauthorized access to cloud servers containing borrower PII (SSN, financial accounts, health info) from Feb 2018 to Jan 2019. Incident discovered Jan 15, 2019. 702 Washington residents notified. Third-party vendor OpticsML was the entry point.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 348 days

discovery → filing · 28 days

Feb 1, 2018

Begins

Jan 15, 2019

Discovered

Feb 12, 2019

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_cca7c7c13166c3442019-02-12Verified by operator
New Hampshire State AGbd_824cdcd4ee1b833a2019-07-10 · +148dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Stanwich Mortgage Loan Trust B
norm: stanwich mortgage loan trust b
Industry: Financial Servicesllm

Discovered: Jan 15, 2019
Breach occurred: Feb 1, 2018 – Jan 15, 2019
Undetected for: 348 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 12, 2019
Affected individuals: 702state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 300-399dexposure 300-399d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Third party: via PairPrep, Inc. d/b/a OpticsML
Initial access: exploit_public_facing

During the incident: Moved information offline
Ascension ceased ongoing work with Optics
Engaged third-party forensic experts
Notified law enforcement
Provided access to credit monitoring services for two years through Kroll
Changes made: Ceased ongoing work with OpticsML
Provided guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGFeb 12 · first

Washington State AGFeb 12 · first · this page

New Hampshire State AG+148d

Pattern: first filing Feb 12 (MT), last Jul 10 (NH) — a 148-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10613.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 12, 2019
Raw hash: 96ffb079532aa949cd483f1324bd0a88ec78c5bf58c812cadb84835aba83ebf6

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityStanwich Mortgage Loan Trust B

Incidentdiscovered Jan 15, 2019

Stated responseMoved information offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com