Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedCustomer Data InvolvedPIIIdentity (basic)LowContained

Legacy Mutual Mortgage

bd_883e139c0828e3fc · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 28, 2020

Filed

Mar 24, 2020

To disclose

8 weeks

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for Legacy Mutual Mortgage →

Legacy Mutual Mortgage notified Montana residents of an email security incident where unauthorized access to employee accounts occurred between May 24, 2019, and September 16, 2019. The breach was discovered on January 28, 2020, after a review determined personal information (names, addresses, etc.) was accessed. Legacy engaged a cybersecurity firm, secured accounts, and offered one year of Experian IdentityWorks credit monitoring. Enhanced security measures, including MFA and phishing training, were implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 249 days

discovery → filing · 8 weeks / 56 days

May 24, 2019

Begins

Jan 28, 2020

Discovered

Mar 24, 2020

Filed

vs. sector median

on median

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_2ab6088a389085822020-03-24Verified
Indiana State AGbd_56ed442690b36fc42020-03-24Verified

Name: Legacy Mutual Mortgage
norm: legacy mutual mortgage

Name: Legacy Mutual Mortgage
norm: legacy mutual mortgage
Industry: Financial Servicesllm

Discovered: Jan 28, 2020
Breach occurred: May 24, 2019 – Sep 16, 2019
Undetected for: 249 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Took steps to secure the accounts
Launched an investigation
A cybersecurity firm was engaged to assist
Conducted a thorough review of the emails and attachments
Offering you a complimentary one-year membership of Experian’s® IdentityWorksSM Credit 3B
Changes made: Providing additional training to employees regarding phishing emails
Implemented enhanced security measures, including multi-factor authentication
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMar 24 · first

Indiana State AGMar 24 · first

Montana State AGMar 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-145.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2020
Raw hash: 2feff296089e67b1026262db56df3cda63c46b0a9c9d725520a0093d21d3db72

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLegacy Mutual Mortgage

Victim entityLegacy Mutual Mortgage

Incidentdiscovered Jan 28, 2020

Stated responseTook steps to secure the accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov