HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
HOMETRUST MORTGAGE COMPANY
bd_b4733612266df4b7 · schema v1 · pii pii-v1
Full breach record for HOMETRUST MORTGAGE COMPANY →On or around October 28, 2024, HomeTrust Mortgage Company experienced a network disruption in which files were accessed and acquired without authorization. The breach was discovered on April 14, 2025 following a comprehensive forensic review. Affected data included names and Social Security numbers. One Maine resident was notified on June 16, 2025. Total affected individuals: 2,234. IDX credit monitoring was offered for 12 months.
Leak gap clock✗ Leak >180d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 1035 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_25cc9353ee23b045Texas State AGfiled 2025-06-17(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/206c9dd4-0639-4f2c-9fff-78ff256df01a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2025
- Raw hash
- c763f2389a44e633b1f3ee509f1393790d653da640c0f329954c4c0973539687
Reporting entity
- Name
- HOMETRUST MORTGAGE COMPANYnorm: hometrust mortgage
- Industry
- Financial Services
Victim entity
- Name
- HOMETRUST MORTGAGE COMPANYnorm: hometrust mortgage
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Apr 14, 2025
- Materiality determined
- Apr 14, 2025
- Notification sent
- Jun 16, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Written notice submitted to Maine Attorney General on June 16, 2025
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 63dME resident >60d · 63d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 14, 2025→ Filed with AG: Jun 16, 202563d 30 days (soft) ME AG >30d Maine Discovered: Apr 14, 2025→ Notified: Jun 16, 202563d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.