Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Movement Mortgage LLC
bd_758d6d327194e47e · schema v1 · pii pii-v1
Full breach record for Movement Mortgage LLC →Movement Mortgage, LLC reported a data breach resulting from sophisticated phishing attacks on its email system. Between August 1 and October 1, 2016, unauthorized logins occurred to company email accounts containing customer PII, including names, SSNs, driver's licenses, and financial account details. Movement engaged forensic experts, reset credentials, notified regulators, and provided one year of Kroll identity monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9d86ea1dc7d8b81fMontana State AGfiled 2017-07-10Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-100185
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2017
- Raw hash
- 1eb15a757e2405d0950fffd12c2886e954116c42c274a042226401a3c6d50528
Reporting entity
- Name
- Movement Mortgage LLCnorm: movement mortgage
Victim entity
- Name
- Movement Mortgage LLCnorm: movement mortgage
Incident
- Discovered
- Sep 8, 2016
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying certain government regulators and the major consumer reporting agencies
- Initial access
- phishing_link
Compliance
- Time to disclose
- 44 weeks(305 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.