MalwareFinancial ServicesFinanceRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

HOMETRUST MORTGAGE COMPANY

bd_9eda5d71c44a82bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 15, 2022

Filed

Nov 18, 2022

To disclose

18 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for HOMETRUST MORTGAGE COMPANY →2 incidents on file

HomeTrust Mortgage Co. experienced a ransomware attack on July 15, 2022, resulting in unauthorized access and data exfiltration. The incident affected one New Hampshire resident, whose name, Social Security number, and address were compromised. HomeTrust engaged cybersecurity experts, secured its environment, and offered 12 months of credit monitoring and identity theft recovery services to the affected individual.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d18 weeks discovery → filing

Incident timeline

discovery → filing · 18 weeks / 126 days

Jul 15, 2022

Discovered

Nov 18, 2022

Filed

vs. sector median

+10 wks slower

This filing is one of 3 about the same incident.View merged incident

A leak claim by alphv about this victim predates this filing by 94 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_3bbe224b6d21dae12022-08-15 · +94dVerified by operator

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_ded614f5eaf6dcc82022-11-18Verified

Name: HOMETRUST MORTGAGE COMPANY
norm: hometrust mortgage

Name: HOMETRUST MORTGAGE COMPANY
norm: hometrust mortgage
Industry: Financial Servicesllm

Discovered: Jul 15, 2022
Materiality determined: —
Notification sent: Nov 23, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Took steps to secure its digital environment
Engaged leading cybersecurity experts to conduct an investigation
Initiated a comprehensive review of the affected files
Changes made: Implemented additional security features
Offered the individual whose information was involved 12 months of complimentary services through IDX, which includes credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy, and fully-managed identity theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(126 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGNov 18 · first

New Hampshire State AGNov 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hometrust-mortgage-20221118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 18, 2022
Raw hash: a0c89f903c6dafd3cb0d6afb1459456dcddb7e1193f71899dcb44fa9953d0b12

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityHOMETRUST MORTGAGE COMPANY

Victim entityHOMETRUST MORTGAGE COMPANY

Incidentdiscovered Jul 15, 2022

Stated responseTook steps to secure its digital environment

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov