Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)Financial accountMediumContained

ANGEL OAK HOME LOANS LLC

bd_950d103d0d6c76fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 7, 2020

Filed

Dec 22, 2020

To disclose

11 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for ANGEL OAK HOME LOANS LLC →

Angel Oak Home Loans, LLC notified the New Hampshire Attorney General of a data security incident affecting one NH resident. Unauthorized access to an employee email account occurred between Oct 6-7, 2020, discovered on Oct 7, 2020. Exposed data included names, SSNs, driver's licenses, passport numbers, and financial account info. Angel Oak engaged forensic experts, notified law enforcement, and offered one year of Kroll identity monitoring services. Notification to the resident was sent Dec 18, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 11 weeks / 76 days

Oct 6, 2020

Begins

Oct 7, 2020

Discovered

Dec 22, 2020

Filed

vs. sector median

+2 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_5486406f9bf268502020-12-22Verified

Name: Morris, Manning & Martin, LLP
norm: morris manning martin
Domain: mmmlaw.com

Name: ANGEL OAK HOME LOANS LLC
norm: angel oak home loans
Industry: Financial Servicesllm

Discovered: Oct 7, 2020
Breach occurred: Oct 6, 2020 – Oct 7, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 18, 2020
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement and is cooperating with their investigation
Initial access: phishing_link

During the incident: Engaged and utilized multiple cyber security experts to assist us in a forensic investigation of this incident
Reviewed the affected emails
Offering a free one-year subscription to Kroll Essential Monitoring Services
Established a dedicated call center service
Changes made: Taken steps to further strengthen and enhance the security of systems in our network, including updating administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGDec 22 · first

New Hampshire State AGDec 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/angel-oak-home-loan-20201222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2020
Raw hash: 4c52b908d57d8098e698a702cd4596198999d016afe42672eb0f02684ea2e27a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMorris, Manning & Martin, LLP

Victim entityANGEL OAK HOME LOANS LLC

Incidentdiscovered Oct 7, 2020

Stated responseEngaged and utilized multiple cyber security experts to assist us in a forensic investigation of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov