Homeaglow, Inc.
bd_7507b6b5bd2af724 · schema v1 · pii pii-v1
All records for Homeaglow, Inc. →Account takeover notice
Homeaglow, Inc. notified users of unauthorized access to their accounts. The filing says: “Rather, it is Homeaglow’s belief that the third party acquired these credentials from a source outside of Homeaglow and subsequently attempted to identify whether any of the credentials could also be used to access Homeaglow user accounts.”
Homeaglow, Inc. detected an abnormally high volume of login attempts on or around December 18, 2023. An unauthorized third party used credentials obtained from an external source to attempt to access Homeaglow user accounts. In some instances, valid credentials allowed access to user accounts. Approximately two New Hampshire residents were potentially affected. Homeaglow reset passwords for impacted accounts and offered identity protection services. No evidence suggests Homeaglow systems were compromised.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 18, 2023
Discovered
Mar 22, 2024
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_10a0d1dc590b48bb2024-03-22Candidate
- Vermont State AGbd_835d6634e8a6107a2024-03-22Verified
- Indiana State AGbd_8984349b656df6b52024-03-22Verified
- Montana State AGbd_aea8604c1d7e265a2024-03-22Candidate
Show 1 more filing ↓Show fewer ↑
- Massachusetts State AGbd_c10416498fa2f4902024-03-22Verified
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.