HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
NATIONS DIRECT MORTGAGE, LLC
bd_bb32ed931456f8b1 · schema v1 · pii pii-v1
Full breach record for NATIONS DIRECT MORTGAGE, LLC →Nations Direct Mortgage, LLC notified customers of unauthorized access to its IT network discovered on December 30, 2023. An external actor accessed and potentially removed data including names, addresses, and Social Security numbers. The incident has been contained. No fraudulent use has been identified. The company engaged third-party experts, notified law enforcement, and offered 24 months of identity monitoring via Kroll.
California clockDiscovered Dec 30, 2023 → Notified Feb 28, 202460d ✓ CA 60-day OK11 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_c4a4f6b7a046c47fMaine State AGfiled 2024-03-14Verified
- bd_350dcf1c22ba0641Washington State AGfiled 2024-03-07(7d gap)Candidate
- bd_94972eb2a4784718Indiana State AGfiled 2024-03-06(8d gap)Verified
- bd_5e078e2946202a00Oregon State AGfiled 2024-04-29(46d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-582463
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 14, 2024
- Raw hash
- c4eee904397b4333bd1ea0cf8913584933f3427d603cd00ce94cfd6ec7fe7ce9
Reporting entity
- Name
- NATIONS DIRECT MORTGAGE, LLCnorm: nations direct mortgage
Victim entity
- Name
- NATIONS DIRECT MORTGAGE, LLCnorm: nations direct mortgage
Incident
- Discovered
- Dec 30, 2023
- Materiality determined
- —
- Notification sent
- Feb 28, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified certain law enforcement and governmental authorities
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 30, 2023→ Notified: Feb 28, 202460d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.