HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Shore Mortgage

bd_8fa7f80896e37313 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 13, 2013

Filed

Aug 22, 2013

To disclose

9 days

Affected

Not disclosed

Confidence

65%

Full breach record for Shore Mortgage →

Shore Mortgage disclosed that an unauthorized individual accessed customer information stored on servers at a third-party vendor. The incident occurred on June 2, 2013, and was discovered on August 13, 2013. Affected data may include names, contact info, dates of birth, driver's license numbers, Social Security numbers, and financial account information. Shore engaged forensic specialists and the FBI, and implemented enhanced security controls and vendor oversight.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 13, 2013 → Notified Aug 21, 20138d ✓ CA 60-day OK9 days discovery → filing

Incident timeline

undetected · 72 days

discovery → filing · 9 days

Jun 2, 2013

Begins

Aug 13, 2013

Discovered

Aug 22, 2013

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Shore Mortgage
norm: shore mortgage
Domain: shoremortgage.com

Name: Shore Mortgage
norm: shore mortgage
Domain: shoremortgage.com
Industry: Financial Servicesllm

Discovered: Aug 13, 2013
Breach occurred: Jun 2, 2013
Undetected for: 72 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 21, 2013
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Coordinated closely with the Federal Bureau of Investigation
Third party: via Vendor
Initial access: supply_chain

During the incident: Hired an nationally-prominent computer forensic specialist to conduct an exhaustive investigation
Coordinated closely with the Federal Bureau of Investigation on an ongoing basis
Changes made: Increased procedural controls over our vendor
Required our vendor to retrain its employees on their own security measures
Implemented additional security measures Shore requires that they follow
Implemented numerous security protocols and additional monitoring procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 days(9 days from discovery to filing)
Compliance flags: CA 60-day OK · 8d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 13, 2013
→ Notified: Aug 21, 2013
8d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 13, 2013 → Notified: Aug 21, 2013	8d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-42546
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2013
Raw hash: 5e7b9b46cb74d895a7a3a19350a503192e4e6e1da04d7a7ddde4bff23bd6e636

Reporting entityShore Mortgage

Victim entityShore Mortgage

Incidentdiscovered Aug 13, 2013

Stated responseHired an nationally-prominent computer forensic specialist to conduct an exhaustive investigation

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov