HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
bpg
bd_8c49642b69e85aa4 · schema v1 · pii pii-v1
Full breach record for bpg →BPG Real Estate Services notified affected individuals of a security incident detected on September 2, 2021, involving unauthorized network access between August 29 and September 2, 2021. The breach potentially exposed personal information including Social Security Numbers, credit/debit card numbers, and bank account numbers. BPG contained the threat, engaged outside cybersecurity professionals, notified law enforcement, and offered one year of complimentary Equifax Credit Watch Gold monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_858bb10be5c1c945Montana State AGfiled 2021-11-04(1d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/11/BPG-redacted-SSN.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 5, 2021
- Raw hash
- 2915e8300af50ceed5688f6f68a7d40b152d0ffb61ae7a61aa622e3fd46002c6
Reporting entity
- Name
- BPG Real Estate Servicesnorm: bpg real estate
Victim entity
- Name
- bpg
- Domain
- balapropertygroup.com
Incident
- Discovered
- Sep 2, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.