Homeaglow, Inc.
bd_aea8604c1d7e265a · schema v1 · pii pii-v1
All records for Homeaglow, Inc. →Account takeover notice
Homeaglow, Inc. notified users of unauthorized access to their accounts. The filing says: “Rather, it is our belief that the third party acquired these credentials from a source outside of Homeaglow and subsequently attempted to identify whether any of the credentials could also be used to access a Homeaglow account.”
Homeaglow, Inc. notified Montana residents of a security event occurring on or around December 18, 2023, where an unauthorized third party used credentials from an external source to attempt access to user accounts. While no evidence of actual unauthorized access or misuse was found, potentially affected individuals' names, addresses, SSNs, and contact info were at risk. Homeaglow reset passwords and offered two years of free identity protection services through IDX. Notices were sent on March 22, 2024.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 18, 2023
Begins
Dec 18, 2023
Discovered
Mar 22, 2024
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Maine State AGbd_10a0d1dc590b48bb2024-03-22Candidate
- New Hampshire State AGbd_7507b6b5bd2af7242024-03-22Verified
- Vermont State AGbd_835d6634e8a6107a2024-03-22Verified
- Indiana State AGbd_8984349b656df6b52024-03-22Verified
Show 1 more filing ↓Show fewer ↑
- Massachusetts State AGbd_c10416498fa2f4902024-03-22Verified
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.