MisuseFinancial ServicesFinancePrivilege AbuseTargetedCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Guaranteed Rate, Inc

bd_93a6e60ae0fea838 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 1, 2017

Filed

Jun 13, 2018

To disclose

32 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Guaranteed Rate, Inc →4 incidents on file

Guaranteed Rate, Inc. notified Montana residents that former employees downloaded customer names and SSNs in Nov 2017 and transferred them to a competitor. The company is litigating and offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 224 days

Nov 1, 2017

Begins

Nov 1, 2017

Discovered

Jun 13, 2018

Filed

vs. sector median

+24 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_b8317f38bec8fafb2018-06-12 · +1dVerified

Name: Guaranteed Rate, Inc
norm: guaranteed rate

Name: Guaranteed Rate, Inc
norm: guaranteed rate
Industry: Financial Servicesllm

Discovered: Nov 1, 2017
Breach occurred: Nov 1, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 12, 2018
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: InternalFinancial
Initial access: insider_action

During the incident: Launched an investigation to determine the nature and scope of this incident
Pursuing this matter in litigation against bemortgage and the individuals responsible
Seeking assurances from our former employee(s) and their new employer that the information is segregated and protected
Offering you access to 12 months of credit monitoring and identity theft restoration services at no cost to you through AllClear ID
Changes made: Working to implement additional safeguards to help prevent a similar future incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(224 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 12 · first

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Guaranteed-Rate-Inc.-2nd-Event.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 13, 2018
Raw hash: 28470b7a2327805130b3d1cf25dc70d3d8557e91e10a72feede2a3a450c4da21

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGuaranteed Rate, Inc

Victim entityGuaranteed Rate, Inc

Incidentdiscovered Nov 1, 2017

Stated responseLaunched an investigation to determine the nature and scope of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov