Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDMediumActive

INSPIRE HOME LOANS INC.

bd_938a31d8f7150851 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 14, 2017

Filed

Feb 9, 2018

To disclose

8 weeks

Affected

1state residents only

Confidence

67%

Full breach record for INSPIRE HOME LOANS INC. →

Inspire Home Loans Inc. notified the NH Attorney General on Feb 9, 2018, of a phishing incident discovered Dec 14, 2017. Fraudulent emails appeared to come from Inspire. An unauthorized actor accessed employee email accounts, exposing one NH resident's name, address, and SSN. Inspire reset passwords, engaged forensic investigators, and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 57 days

Dec 14, 2017

Discovered

Feb 9, 2018

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: INSPIRE HOME LOANS INC.
norm: inspire home loans

Name: INSPIRE HOME LOANS INC.
norm: inspire home loans
Industry: Financial Servicesllm

Discovered: Dec 14, 2017
Materiality determined: —
Notification sent: Feb 9, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: phishing_link

During the incident: Commenced an investigation
Reset all email account passwords
Engaged a professional forensic security firm
Changes made: Implementing additional security measures
Providing additional training to their employees regarding data security
Offering the affected individual a complimentary one year membership in credit monitoring and identity theft protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/inspire-home-loans-20180209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2018
Raw hash: 73a1a3e6d06b0b9ec90a85ebce554bea95acb119ce2431affdf3cee41c89528e

Reporting entityINSPIRE HOME LOANS INC.

Victim entityINSPIRE HOME LOANS INC.

Incidentdiscovered Dec 14, 2017

Stated responseCommenced an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov