HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
ACADEMY MORTGAGE CORPORATION
bd_a04b7d44352861c2 · schema v1 · pii pii-v1
Full breach record for ACADEMY MORTGAGE CORPORATION →Academy Mortgage Corporation reported an external system breach (hacking) on March 21, 2023, affecting 284,443 individuals, including 618 in Maine. The breach compromised names and Social Security Numbers. The company notified consumers in writing on December 20, 2023, and offered 12 months of TransUnion credit monitoring and identity theft recovery services.
Maine clockDiscovered Mar 21, 2023 → Filed with AG Jan 15, 2024300d ✗ ME AG >90d43 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 7 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 246 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6ec09ae80601c340Leak Sitealphvfiled 2023-05-14(246d gap)Verified by operator
Regulatory filings (5) · sorted by filing gap
- bd_7a0d1938864b9a74California State AGfiled 2024-01-15Verified
- bd_d76d3319b21c6f7bOregon State AGfiled 2024-01-05(10d gap)Verified by operator
- bd_e728b3b38da97809California State AGfiled 2024-01-05(10d gap)Verified by operator
- bd_3b5884dbff92d2bbMontana State AGfiled 2023-12-27(19d gap)Verified by operator
Show 1 more filing ↓Show fewer ↑up to 19d gap
- bd_e304b68c35220b07Washington State AGfiled 2023-12-27(19d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/203fc6cf-82c9-4d8e-b280-501bb49c6602.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 15, 2024
- Raw hash
- b7999da3f11b6562db75a56a1ff76ed5428b6e5a0d33bc01ff31a166bfee9576
Reporting entity
- Name
- ACADEMY MORTGAGE CORPORATIONnorm: academy mortgage
Victim entity
- Name
- ACADEMY MORTGAGE CORPORATIONnorm: academy mortgage
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- —
- Notification sent
- Dec 20, 2023
- Affected individuals
- 284,443
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 43 weeks(300 days from discovery to filing)
- Compliance flags
- ME AG >90d · 300dME resident >180d · 274dLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 21, 2023→ Filed with AG: Jan 15, 2024300d 90 days ME AG >90d Maine Discovered: Mar 21, 2023→ Notified: Dec 20, 2023274d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.