HackingFinancial ServicesFinanceStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
VISTA POINT MORTGAGE, LLC
bd_7ee9599b17047967 · schema v1 · pii pii-v1
Full breach record for VISTA POINT MORTGAGE, LLC →Vista Point Mortgage, LLC reported an external email account compromise affecting two employee email accounts. Unauthorized access occurred between May 21 and June 5, 2024, but was not discovered until September 27, 2024, following a full review of impacted accounts. Exposed data included names and Social Security numbers. Three Maine residents were affected out of 13,391 total. Written notice was sent November 18, 2024. IDX credit monitoring (12 months) was offered to affected individuals.
Maine clockDiscovered Sep 27, 2024 → Filed with AG Nov 18, 202452d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2e15cc8799d39d60Indiana State AGfiled 2024-11-18Verified
- bd_9a6faaa8041f7e55California State AGfiled 2024-11-18Verified
- bd_ad9b2d6f611cafc5New Hampshire State AGfiled 2024-11-18Verified
- bd_e05d422e5108d090Montana State AGfiled 2024-11-18Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/13057a09-3173-464a-9740-1cee68b4b3dd.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 18, 2024
- Raw hash
- 7f1e366c3df1406229427cd619ff4d88b9215f30a5d7eb02de2afb7a3a90ec15
Reporting entity
- Name
- VISTA POINT MORTGAGE, LLCnorm: vista point mortgage
- Domain
- vistapointmtg.com
- Industry
- Financial Services
Victim entity
- Name
- VISTA POINT MORTGAGE, LLCnorm: vista point mortgage
- Domain
- vistapointmtg.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Sep 27, 2024
- Materiality determined
- —
- Notification sent
- Nov 18, 2024
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified relevant state and federal regulatorsNotified Maine Attorney General
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- ME AG >30d · 52d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 27, 2024→ Filed with AG: Nov 18, 202452d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.